Filtered by vendor Skycaiji Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-28096 1 Skycaiji 1 Skycaiji 2023-08-08 7.2 High
Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.
CVE-2023-33394 1 Skycaiji 1 Skycaiji 2023-06-02 5.4 Medium
skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS). Attackers can achieve backend XSS by deploying malicious JSON data.
CVE-2022-44351 1 Skycaiji 1 Skycaiji 2022-12-10 9.8 Critical
Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php.
CVE-2018-11371 1 Skycaiji 1 Skycaiji 2022-10-03 N/A
SkyCaiji 1.2 allows CSRF to add an Administrator user.
CVE-2020-18878 1 Skycaiji 1 Skycaiji 2021-08-24 5.3 Medium
Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'.