cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PHP script file is written to the website server, and accessing this file can lead to a code execution vulnerability.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCmseasy
APPCmseasy7.7.5_20211012
Powiązane podatności
cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method a...
CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents funct...
Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers t...
An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encr...
An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /in...