VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Sep 4, 2020· Updated Jun 17, 2026

CVE-2020-24981

CVE-2020-24981

Description

An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS.

Affected products

3
  • Ucms Project/Ucms
    cpe:2.3:a:ucms_project:ucms:1.4.8:*:*:*:*:*:*:*
  • Ucms/Ucmscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: =1.4.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.