Cuppa CMS v1.0 - SQL injection

披露于 2022/02/01 · 更新于 2025/08/04

CVSS 评分7.5/ 10.0

EPSS 概率53.6%百分位 97.8%

漏洞描述

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the order_by parameter.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 cuppacms 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2022-37191 Cuppa CMS v1.0 - Authenticated Local File Inclusion cuppacms	中危	6.5	75.7%	PoCEXP	2022/09/14
CVE-2022-37190RCE Cuppa CMS v1.0 - Remote Code Execution cuppacms	高危	8.8	86.9%	PoCEXP	2022/09/14
CVE-2022-38296 Cuppa CMS v1.0 - Arbitrary File Upload cuppacms	严重	9.8	87.0%	PoCEXP	2022/09/13
CVE-2022-38295 Cuppa CMS v1.0 - Cross Site Scripting cuppacms	中危	6.1	45.1%	PoCEXP	2022/09/13
CVE-2022-34121 CuppaCMS v1.0 - Local File Inclusion cuppacms	高危	7.5	42.4%	PoCEXP	2022/07/28
CVE-2022-27985 Cuppa CMS v1.0 - SQL injection cuppacms	严重	9.8	12.0%	PoCEXP	2022/04/26