TpMeCMS 路径遍历漏洞

TpMeCMS is a CMS based on the FastAdmin framework developed by Xiaohe, an individual developer. A path traversal vulnerability exists in TpMeCMS 1.3.3.1 and earlier versions, which stems from the parameter lang in the file /index/ajax/lang that causes path traversal...

CVE-2024-8876: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The...

The vulnerability of the /index/ajax/lang component of the FastAdmin remote administration utility, which allows a hacker to expose protected information.

The vulnerability of the /index/ajax/lang component of the FastAdmin remote administration utility is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

CVE-2024-7928: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploi...