CVE-2022-25486

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...

Code injection

The component /jqueryfileupload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file...

Design/Logic Flaw

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php...

Remote code execution

CuppaCMS v1.0 was discovered to contain a remote code execution RCE vulnerability via the saveConfigData function in /classes/ajax/Functions.php...

Code injection

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function...

CVE-2022-25485

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php...

CVE-2022-25485

CuppaCMS v1.0 contains a Local File Inclusion in /alerts/alertLightbox.php via the url parameter. Affected component: CuppaCMS 1.0; root cause: insufficient input validation leading to LFI. Impact per sources: unauthorized access to sensitive files; potential remote code execution and system comp...

CVE-2022-25486

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...

CVE-2022-25486

CVE-2022-25486 affects CuppaCMS v1.0 and is a local file inclusion in the /alerts/alertConfigField.php endpoint via the url parameter. Root cause: insufficient filtering of local file resources. Impact (as described in connected sources): unauthorized access, sensitive information disclosure, and...

CVE-2022-25495

The component /jqueryfileupload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file...

CVE-2022-25495

CVE-2022-25495 affects CuppaCMS v1.0, where the vulnerable component is /jquery_file_upload/server/php/index.php. An attacker can upload arbitrary files via a crafted PHP file and achieve remote code execution. The vulnerability is described across multiple feeds (NVD entry, CNVD/CNNVD summaries,...

CVE-2022-25497

CVE-2022-25497 affects CuppaCMS v1.0. The connected nuclei template confirms a Local File Inclusion vulnerability: an arbitrary file read via the copy function. Exploitation could lead to unauthorized information disclosure and, per the template, may enable further impact such as remote code exec...

CVE-2022-25497

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function...

CVE-2022-25498

CVE-2022-25498 affects CuppaCMS v1.0, where a remote code execution (RCE) exists via the saveConfigData function in /classes/ajax/Functions.php. The Red Hat/CNVD/CVE mirrorings confirm an RCE in CuppaCMS with this entry, but no vendor patch/version is specified in the provided connected documents...

CVE-2022-25498

CuppaCMS v1.0 was discovered to contain a remote code execution RCE vulnerability via the saveConfigData function in /classes/ajax/Functions.php...

CuppaCMS 安全漏洞

CuppaCMS is a content management system CMS, and a file inclusion vulnerability exists in CuppaCMS version 1.0. The vulnerability stems from the fact that the url parameter in /alerts/alertLightbox.php does not effectively filter calls to local file resources, which could be exploited to read loc...

PT-2022-17321 · Cuppacms · Cuppacms

Name of the Vulnerable Software and Affected Versions: CuppaCMS version 1.0 Description: The issue is related to a local file inclusion via the url parameter in the /alerts/alertConfigField.php endpoint. This allows for potential unauthorized access to local files. Recommendations: For CuppaCMS...

CuppaCMS 安全漏洞

CuppaCMS is a content management system CMS, and a file inclusion vulnerability exists in CuppaCMS version 1.0. The vulnerability stems from the fact that the url parameter in /alerts/alertConfigField.php does not effectively filter calls to local file resources, which could be exploited to read...

PT-2022-17333 · Cuppacms · Cuppacms

Name of the Vulnerable Software and Affected Versions: CuppaCMS version 1.0 Description: The issue is related to a remote code execution RCE vulnerability. It is exploited via the saveConfigData function in the /classes/ajax/Functions.php file. Recommendations: For CuppaCMS version 1.0, as a...

CuppaCMS 代码注入漏洞

CuppaCMS is a content management system that can be found to contain arbitrary files read via the copy function.A remote code execution vulnerability exists in CuppaCMS, which can be exploited by attackers to execute arbitrary code in the context of a system account...