Default configuration

2018-12-2816:29:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.2%

JSON

DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.\Public\Config\config.ini.php to read the global configuration file.

CPENameOperatorVersion
damicmseq6.0.1

CPE	Name	Operator	Version
	damicms	eq	6.0.1

References

github.com/AutismJH/damicms/issues/1