CVE-2018-12065

2022-10-0316:22:08

mitre

www.cve.org

local file inclusion

creatiwity witycms

remote attackers

php code

helper.json

AI Score

9.1

Confidence

High

EPSS

0.003

Percentile

69.2%

JSON

A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files (execute PHP code) or read non-PHP files by replacing a helper.json file.

References

github.com/Creatiwity/wityCMS/issues/152

xkklq.coding.me/2018/06/07/wityCMS-LFI/