CVE-2018-12494

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...

PT-2018-11216

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.20180210 Description An issue was discovered that allows for "Directory Traversal" and "Arbitrary file read" via the "/admin/cmsTemplate/content.html" API endpoint with a path variable set to ../. Recommendations For...