CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fckedit_action method of /admin/template_admin.php. This vulnerability allows attackers to read arbitrary files.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCmseasy
APPCmseasy7.7.7.9
Powiązane podatności
cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method a...
Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers t...
An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encr...
cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PH...
An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /in...