4 matches found
CVE-2022-25497
CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function...
CVE-2022-25497
creationtimestamp| type| source ---|---|--- 2022-03-15 21:19:33+00:00| seen| https://t.me/cibsecurity/38961 2026-09-18 11:00:31+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/064ef2a1-8c2d-45c2-a72d-5eef83495155...
CVE-2022-25497
CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function...
CVE-2022-25497
CuppaCMS v1.0 contains an arbitrary file read vulnerability rooted in its copy function . This flaw allows an attacker to perform a Local File Inclusion (LFI) , which can lead to unauthorized access, sensitive information disclosure, and potential remote code execution. Remediation involves upgra...