CVE-2022-34121

Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...

CVE-2022-27984

CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menufilter parameter at /administrator/templates/default/html/windows/right.php...

PT-2022-18734

Name of the Vulnerable Software and Affected Versions CuppaCMS version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the menu filter parameter at the "/administrator/templates/default/html/windows/right.php" endpoint. Recommendations For CuppaCMS...