CuppaCMS alertConfigField.php file contains a vulnerability

CuppaCMS is a content management system CMS, and a file inclusion vulnerability exists in CuppaCMS version 1.0. The vulnerability stems from the fact that the url parameter in /alerts/alertConfigField.php does not effectively filter calls to local file resources, which could be exploited to read...

CuppaCMS alertLightbox.php file contains vulnerabilities

CuppaCMS is a content management system CMS, and a file inclusion vulnerability exists in CuppaCMS version 1.0. The vulnerability stems from the fact that the url parameter in /alerts/alertLightbox.php does not effectively filter calls to local file resources, which could be exploited to read loc...

CuppaCMS Remote Code Execution Vulnerability (CNVD-2022-22313)

CuppaCMS is a content management system that can be found to contain arbitrary files read via the copy function.A remote code execution vulnerability exists in CuppaCMS, which can be exploited by attackers to execute arbitrary code in the context of a system account...

CuppaCMS Remote Code Execution Vulnerability (CNVD-2022-22311)

CuppaCMS is a content management system and the vulnerability exploits the component /jqueryfileupload/server/php/index.php to allow attackers to upload arbitrary files.A remote code execution vulnerability exists in CuppaCMS, which allows attackers to execute arbitrary code via a carefully craft...

CuppaCMS has an unspecified vulnerability

CuppaCMS is a content management system CMS. a security vulnerability exists in CuppaCMS version 1.0, which stems from the fact that CuppaCMS reads arbitrary files via the copy function. No details of the vulnerability are currently available...

CVE-2022-25497

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function...

CVE-2022-25485

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php...

CVE-2022-25485

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php...

CVE-2022-25486

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...

CVE-2022-25498

CuppaCMS v1.0 was discovered to contain a remote code execution RCE vulnerability via the saveConfigData function in /classes/ajax/Functions.php...

CVE-2022-25495

The component /jqueryfileupload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file...

CVE-2022-25497

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function...

CVE-2022-25485

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php...

CVE-2022-25486

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...

CVE-2022-25498

CuppaCMS v1.0 was discovered to contain a remote code execution RCE vulnerability via the saveConfigData function in /classes/ajax/Functions.php...

CVE-2022-25495

The component /jqueryfileupload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file...

CVE-2022-25497

CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function...

CVE-2022-25498

CuppaCMS v1.0 was discovered to contain a remote code execution RCE vulnerability via the saveConfigData function in /classes/ajax/Functions.php...

CVE-2022-25495

The component /jqueryfileupload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file...

Design/Logic Flaw

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...