Skip to content

Issues: taogogo/taocms

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

29 Open 7 Closed
29 Open 7 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

安装问题
#37 opened Dec 16, 2023 by museions
There is a stored cross-site scripting attack in "Friendly Links" (column administrator rights)
#36 opened Nov 19, 2023 by Lejeremiah
File upload vulnerability exists by modifying Upload.php configuration in backend.
#35 opened Dec 21, 2022 by xiaoabai
Bypass security protection injection code in the website settings function
#34 opened Jul 17, 2022 by chasingboy
可通过后台修改config.php文件导致getshell
#33 opened Mar 28, 2022 by suifeng-kali
Add a security policy
#32 opened Mar 19, 2022 by JamieSlome
There is a storage xss in the add module of friendly links in Taocms3.0.2.
#30 opened Feb 19, 2022 by k0xx11
There is a storage XSS vulnerability in the add column of Taocms3.0.2 's management column.
#29 opened Feb 19, 2022 by k0xx11
Code injection caused by arbitrary file editing vulnerability in taocms3.0.2
#28 opened Feb 19, 2022 by k0xx11
taocms3.0.2 SQL injection exists in the background
#27 opened Feb 16, 2022 by zhendezuile
A malicious file upload vulnerability exists in File.php of the file management function module.
#25 opened Jan 19, 2022 by metaStor
SQL blind annotation exists in admin.php page of Comment function
#24 opened Jan 17, 2022 by Am1azi3ng
There is SQL blind injection at "Comment Update"
#23 opened Jan 17, 2022 by xuchaofan
There is SQL blind injection at "Link Del"
#22 opened Jan 16, 2022 by Whippet0
There is SQL blind injection at "Category Del"
#21 opened Jan 15, 2022 by Whippet0
There is SQL blind injection at "Category Update"
#20 opened Jan 15, 2022 by Whippet0
There is SQL blind injection at "Category Edit"
#19 opened Jan 15, 2022 by Whippet0
There is SQL blind injection at "Cms Del"
#18 opened Jan 15, 2022 by Whippet0
There is SQL blind injection at "Admin Update"
#17 opened Jan 15, 2022 by Whippet0
There is SQL blind injection at "Admin Edit"
#16 opened Jan 15, 2022 by Whippet0
arbitrary file read vulnerability
#15 opened Jan 10, 2022 by destinypwd
1
There is SQL blind injection at "Management Link"
#14 opened Jan 4, 2022 by bkfish
arbitrary file read vulnerability
#13 opened Jan 4, 2022 by bkfish
exist is an arbitrary file delete vulnerability
#12 opened Dec 11, 2021 by win1498419293
There is SQL blind injection at "Management article"
#11 opened Dec 11, 2021 by win1498419293
ProTip! Exclude everything labeled bug with -label:bug.