CVE Intelligence

Daicuo vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Daicuo products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-61194 Medium · 6.5 CWE-89 Oct 21, 2025
SQL Injection in Daicuo
daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php.
CVE-2025-61181 Medium · 6.5 CWE-434 Oct 21, 2025
Unrestricted Upload of File with Dangerous Type in Daicuo
daicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feature.