CVE-2024-34315

The content management system CmsEasy version 7.7.7.9 is vulnerable to a local file inclusion (LFI) flaw. The root cause is the improper use of the file_get_contents function within the fckedit_action method of the /admin/template_admin.php file. This vulnerability allows an attacker to read arbi...

CVE-2024-34314

CmsEasy version v7.7.7.9 is susceptible to a local file inclusion vulnerability within the fetch_action method of /admin/template_admin.php. The root cause is the improper use of the file_get_contents function, which allows an attacker to read arbitrary files on the system. To mitigate this risk,...

CVE-2024-34314

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fetchaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...

CVE-2024-34315: Improper Limitation of a Pathname to a Restricted Directory

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fckeditaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...

CVE-2024-34314

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fetchaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...

CVE-2024-31551

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

CVE-2024-31551

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

CVE-2024-31551

The cmseasy content management system (CMS) version v7.7.7.9 20240105 is affected by a Directory Traversal vulnerability in the lib/admin/image.admin.php file. An unauthenticated attacker can exploit this flaw by sending a crafted GET request to delete arbitrary files on the server. As of the cur...

CVE-2024-31551

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

CVE-2024-31551

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

CVE-2024-31551: Path Traversal: '/dir/../filename'

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

cmseasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's CmsEasy Technology CmsEasy. A security vulnerability exists in cmseasy version v7.7.7.9, which originates from a path traversal vulnerability in the lib/admin/image.admin.php file...

CVE-2024-32236

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...

CVE-2024-32236

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...

CVE-2024-32236: Insecure Storage of Sensitive Information

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...

PT-2024-24468 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: CmsEasy versions 7.7 and earlier Description: The issue allows a remote attacker to obtain sensitive information via the update function in the "index.php" component. Recommendations: For CmsEasy versions 7.7 and earlier, update to a version...

CVE-2024-32236

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...

CVE-2024-32236

The CmsEasy content management system (CMS), developed by Jiuzhou ET Technology, is vulnerable in versions v.7.7 and before . A remote attacker can obtain sensitive information by exploiting a flaw in the update function located within the index.php component. To remediate this issue, users are r...

CVE-2024-32236

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology CmsEasy. A security vulnerability exists in CmsEasy v.7.7 and prior versions, which originated from allowing remote attackers to obtain sensitive information via the update function in t...