PT-2018-15466

Name of the Vulnerable Software and Affected Versions Lei Feng TV CMS aka LFCMS version 3.8.6 Description The issue allows for full path disclosure via the "/install.php?s=/1" API endpoint. This could potentially reveal sensitive information about the system's directory structure. Recommendations...

CVE-2018-20602: Exposure of Sensitive Information to an Unauthorized Actor

Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...