98 matches found
CVE-2023-30267
CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...
CVE-2023-30269
CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...
CVE-2023-30265
CLTPHP =6.0 is vulnerable to Directory Traversal...
CVE-2023-30267
CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...
CVE-2023-30269
CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...
Directory traversal
CLTPHP =6.0 is vulnerable to Directory Traversal...
Input validation
CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...
Unrestricted file upload
CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...
Cross site scripting
CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...
PT-2023-22616 · Cltphp · Cltphp
Name of the Vulnerable Software and Affected Versions: CLTPHP versions 6.0 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types. Recommendations: For versions 6.0 and earlier, at the moment, there is no information about a newer version that contains...
PT-2023-22617 · Cltphp · Cltphp
Name of the Vulnerable Software and Affected Versions: CLTPHP versions prior to 6.0 Description: The issue concerns Cross Site Scripting XSS via the application/home/controller/Changyan.php file. Recommendations: For versions prior to 6.0, update to a version that includes the fix for this issue ...
CVE-2023-30266: Unrestricted Upload of File with Dangerous Type
CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...
CVE-2023-30265: Improper Limitation of a Pathname to a Restricted Directory
CLTPHP =6.0 is vulnerable to Directory Traversal...
CVE-2023-30266
CVE-2023-30266 affects CLTPHP versions 6.0 and earlier, vulnerable to Unrestricted Upload of File with Dangerous Type. The issue is a file upload vulnerability described across multiple sources; no concrete fix version is provided in the connected documents. The CVSSv3.1 base score is 8.8 (High) ...
CVE-2023-30266
CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...
CVE-2023-30266
CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...
CVE-2023-30267
CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...
CVE-2023-30267
CLTPHP versions prior to 6.0 are vulnerable to Cross-Site Scripting (XSS) through the Changyan.php file in application/home/controller/Changyan.php. The root cause is insufficient user-supplied data filtering/escaping in Changyan.php, enabling injection of malicious script. Affected: CLTPHP