28 matches found
cve-2026-16219-croogo-lab
CVE-2026-16219: Croogo FileManager 防御ラボ このリポジトリは、Croogo CMS における CVE-2026-16219 として追跡されているパス認可の欠陥を文書化し、安全に実証するものです。これは、自分が所有するシステム、または明示的に評価を許可されたシステムをテストする、防御者、メンテナ、学生、研究者を対象としています。 安全境界: 同梱の HTTP 概念実証コードは、リテラルなループバックアドレス 127.0.0.1 のみを受け付け、固定された非 Web 宛先 /tmp/croogo-cve-2026-16219/ に生成された .txt...
Exploit for CVE-2026-16219
CVE-2026-16219: Croogo FileManager defensive lab !Safety: l...
CVE-2026-16219
A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...
CVE-2026-16219
A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...
EUVD-2026-45430
A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...
CVE-2026-16219 Croogo CMS Admin File Manager FileManager.php isEditable path traversal
A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...
CVE-2026-16219
CVE-2026-16219 affects Croogo CMS versions up to 4.0.7. The vulnerability lies in the Admin File Manager component, specifically FileManager::isEditable in FileManager/src/Utility/FileManager.php, leading to path traversal. Exploitation can be performed remotely; a working exploit has been publis...
PT-2026-61053
Name of the Vulnerable Software and Affected Versions Croogo CMS versions prior to 4.0.8 Description A path traversal flaw exists in the Admin File Manager component. The issue resides in the isEditable function within the FileManager/src/Utility/FileManager.php file. This flaw allows a remote...
CVE-2026-16219: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...
CVE-2024-42718
A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter...
GHSA-G5P6-3J82-XFM4 Croogo CMS has a path traversal vulnerability
A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter...
EUVD-2024-55362
Croogo CMS has a path traversal vulnerability...
CVE-2024-42718
A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter...
CVE-2024-42718
Croogo CMS 4.0.7 is vulnerable to a path traversal (Directory Traversal) vulnerability due to improper validation of the edit-file parameter. Remote attackers can exploit this by supplying a specially crafted path, such as using "dot-dot-slash" (../) sequences or absolute paths, to read arbitrary...
CVE-2024-42718: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter...
CVE-2024-42718
A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter...
CVE-2024-42718
A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter...
Croogo Cross-Site Scripting Vulnerability
Croogo is a content management system CMS based on the CakePHP framework development . The system provides content type can be customized for Blog, Node, Page, content editing using WYSIWYG editor and other features. A cross-site scripting vulnerability exists in Page name in Croogo version...
Croogo CMS Cross-Site Scripting Vulnerability
Croogo CMS is a content management system. Croogo CMS suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...
