Lucene search
MitreCVELIST:CVE-2022-37191HistorySep 13, 2022 - 10:07 p.m.
CVE-2022-37191
2022-09-1322:07:19
mitre
www.cve.org
cuppacms vulnerability lfi
0.252 Low
EPSS
Percentile
96.7%
The component “cuppa/api/index.php” of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using [function] parameter value as LFI payload.
Related
cve
cve
CVE-2022-37191
2022-09-13 23:15:08
prion
prion
Cross site request forgery (csrf)
2022-09-13 23:15:00
nuclei
nuclei
Cuppa CMS v1.0 - Authenticated Local File Inclusion
2023-04-21 08:56:01
nvd
nvd
CVE-2022-37191
2022-09-13 23:15:08