CVE-2023-30266

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2023-30269

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

CVE-2023-30267

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

CVE-2023-30267

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

CVE-2023-30265

CLTPHP =6.0 is vulnerable to Directory Traversal...

Unrestricted file upload

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...

Cross site scripting

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

Input validation

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

Directory traversal

CLTPHP =6.0 is vulnerable to Directory Traversal...

CVE-2023-30266

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2023-30267

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

CVE-2023-30266

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2023-30265

CLTPHP =6.0 is vulnerable to Directory Traversal...

CVE-2023-30269

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

PT-2023-22617 · Cltphp · Cltphp

Name of the Vulnerable Software and Affected Versions: CLTPHP versions prior to 6.0 Description: The issue concerns Cross Site Scripting XSS via the application/home/controller/Changyan.php file. Recommendations: For versions prior to 6.0, update to a version that includes the fix for this issue ...

CVE-2023-30267

CLTPHP versions prior to 6.0 are vulnerable to Cross-Site Scripting (XSS) through the Changyan.php file in application/home/controller/Changyan.php. The root cause is insufficient user-supplied data filtering/escaping in Changyan.php, enabling injection of malicious script. Affected: CLTPHP

CVE-2023-30267: Improper Neutralization of Input During Web Page Generation

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

CLTPHP 路径遍历漏洞

CLTPHP is an open source PHP content management system for efficient website building. A security vulnerability exists in CLTPHP version 6.0 and earlier versions. An attacker exploited the vulnerability to read arbitrary files on the server running the application...

CVE-2023-30269: Improper Input Validation

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

PT-2023-22619

Name of the Vulnerable Software and Affected Versions CLTPHP versions 6.0 and earlier Description The issue is related to Improper Input Validation. It affects the application/admin/controller/Template.php file. Recommendations For CLTPHP versions 6.0 and earlier, at the moment, there is no...