Daicuo vulnerabilities
Published CVEs affecting Daicuo products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-61194
Medium · 6.5
CWE-89 Oct 21, 2025
SQL Injection in Daicuo
daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php.
CVE-2025-61181
Medium · 6.5
CWE-434 Oct 21, 2025
Unrestricted Upload of File with Dangerous Type in Daicuo
daicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feature.