Code injection

2017-07-2413:29:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=…/ attack on actionphp/download.File.php.

CPENameOperatorVersion
tilde_cmseq1.0.1

CPE	Name	Operator	Version
	tilde_cms	eq	1.0.1

References

backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/