Cuppa CMS v1.0 - SQL injection

披露于 2022/04/26 · 更新于 2025/10/14

CVSS 评分9.8/ 10.0

EPSS 概率12.0%百分位 93.5%

漏洞描述

CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.

影响产品

cuppacmscuppacms查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

github.comhttps://github.com/CuppaCMS/CuppaCMS↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-27984↗www.cuppacms.comhttps://www.cuppacms.com/↗cuppa.comhttp://cuppa.com↗

RELATED INTELLIGENCE

同产品关联漏洞

与 cuppacms 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2022-37191 Cuppa CMS v1.0 - Authenticated Local File Inclusion cuppacms	中危	6.5	75.7%	PoCEXP	2022/09/14
CVE-2022-37190RCE Cuppa CMS v1.0 - Remote Code Execution cuppacms	高危	8.8	86.9%	PoCEXP	2022/09/14
CVE-2022-38296 Cuppa CMS v1.0 - Arbitrary File Upload cuppacms	严重	9.8	87.0%	PoCEXP	2022/09/13
CVE-2022-38295 Cuppa CMS v1.0 - Cross Site Scripting cuppacms	中危	6.1	45.1%	PoCEXP	2022/09/13
CVE-2022-34121 CuppaCMS v1.0 - Local File Inclusion cuppacms	高危	7.5	42.4%	PoCEXP	2022/07/28
CVE-2022-27985 Cuppa CMS v1.0 - SQL injection cuppacms	严重	9.8	12.0%	PoCEXP	2022/04/26