PT-2023-22619

Name of the Vulnerable Software and Affected Versions CLTPHP versions 6.0 and earlier Description The issue is related to Improper Input Validation. It affects the application/admin/controller/Template.php file. Recommendations For CLTPHP versions 6.0 and earlier, at the moment, there is no...

CVE-2023-30269

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

CVE-2023-30269

CLTPHP

CVE-2023-30266

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2023-30266: Unrestricted Upload of File with Dangerous Type

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2023-30265

CLTPHP =6.0 is vulnerable to Directory Traversal...

CVE-2023-30267

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

CVE-2023-30267

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

PT-2023-22616 · Cltphp · Cltphp

Name of the Vulnerable Software and Affected Versions: CLTPHP versions 6.0 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types. Recommendations: For versions 6.0 and earlier, at the moment, there is no information about a newer version that contains...

CVE-2023-30265: Improper Limitation of a Pathname to a Restricted Directory

CLTPHP =6.0 is vulnerable to Directory Traversal...

CVE-2023-30265

CVE-2023-30265 affects CLTPHP versions prior to 6.1 (CLTPHP

CVE-2023-30265

CLTPHP =6.0 is vulnerable to Directory Traversal...

CVE-2023-30269

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

CVE-2022-1085

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-1085

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

Cross site scripting

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-1085

CVE-2022-1085 concerns CLTPHP up to v6.0. The vulnerability implicates the POST Parameter Handler, enabling cross-site scripting via remote manipulation. Multiple connected sources (NVD entry, Red Hat advisory, CVE records, and related risk enrichments) consistently describe the flaw as a client-...

CVE-2022-1085 CLTPHP POST Parameter cross site scripting

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-1085 CLTPHP POST Parameter cross site scripting

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-1085: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...