Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-72247
HistorySep 11, 2023 - 12:00 a.m.

CuppaCMS Code Execution Vulnerability

2023-09-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
cuppacms vulnerability
code execution
configuration.php
arbitrary code execution
email_outgoing parameter

EPSS

0.006

Percentile

79.3%

CuppaCMS is a content management system (CMS). A code execution vulnerability exists in CuppaCMS v1.0, which stems from the email_outgoing parameter of the /Configuration.php file failing to properly filter the special elements of a constructed snippet. An attacker can exploit this vulnerability to cause arbitrary code execution.

EPSS

0.006

Percentile

79.3%

Related for CNVD-2023-72247