Arbitrary file deletion

lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php...

Arbitrary file deletion

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

CVE-2023-23136

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

PT-2023-15571 · Lmxcms · Lmxcms

Name of the Vulnerable Software and Affected Versions: lmxcms version 1.41 Description: The issue is related to an arbitrary file read vulnerability. It affects the TemplateAction.class.php file, allowing unauthorized access to files. Recommendations: For lmxcms version 1.41, consider restricting...

PT-2023-18854

Name of the Vulnerable Software and Affected Versions lmxcms version 1.41 Description The issue is related to an arbitrary file deletion vulnerability. It is exploited via the BackdbAction.class.php file. Recommendations For lmxcms version 1.41, consider restricting access to the...

CVE-2023-23136

The provided connected documents confirm a concrete vulnerability in lmxcms v1.41: an arbitrary file deletion issue exploitable via BackdbAction.class.php. The attack surface is the BackdbAction component, with impact described as high on integrity and availability while confidentiality remains u...

CVE-2022-48094

lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php...

CVE-2022-48094: Files or Directories Accessible to External Parties

lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php...

CVE-2023-23136: Improper Limitation of a Pathname to a Restricted Directory

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

CVE-2023-23136

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

CVE-2022-48094

lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php...

CVE-2022-48094

CVE-2022-48094 affects lmxcms v1.41, with an arbitrary file read vulnerability exposed through TemplateAction.class.php. The issue, confirmed in multiple sources, yields a High confidentiality impact (C:H) and a Medium overall risk (CVSS 3.1: 4.9) with network access, low attack complexity, no us...

lmxcms path traversal vulnerability

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. There is a security vulnerability in lmxcms v1.41, which originated from the discovery of an arbitrary file deletion vulnerability via BackdbAction.class.php...

lmxcms security vulnerabilities

lmxcms dream cms is a 222 by China Dream Cms lmxcms company A security vulnerability exists in lmxcms v1.41, which stems from its TemplateAction.class.php component that allows an attacker to achieve arbitrary file reads...

Code execution vulnerability in lmxcms

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A code execution vulnerability exists in lmxcms, which can be exploited by attackers to gain control of the server...

Dream CMS LmxCMS has an arbitrary file deletion vulnerability

LmxCMS is developed using php language and mysql database, and adopts the mainstream MVC design model. Dream CMS LmxCMS has an arbitrary file deletion vulnerability that can be exploited by attackers to cause arbitrary file deletion...

Lmxcms V1.4 SQL Injection Vulnerability in Backend Fie***.php

lmxcms is based on php language and mysql database development, the system is developed using the industry's popular MVC design pattern. Lmxcms V1.4 background Fie.php SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

Code Execution Vulnerability in Ac***.cl***.php in LmxCMS V1.4 Backend

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A code execution vulnerability exists in Ac.cl.php in the backend of LmxCMS V1.4. An attacker can exploit the vulnerability to launch a remote command...

LmxCMS V1.4 SQL Injection Vulnerability in Frontend Bo***.cl***.php

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A SQL injection vulnerability exists in LmxCMS V1.4 frontend Bo.cl.php. An attacker can exploit this vulnerability to obtain sensitive database information...

Code Execution Vulnerability in LmxCMS V1.4 Backend Te***.cl***.php

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A code execution vulnerability exists in Te.cl.php in the backend of LmxCMS V1.4. An attacker can exploit this vulnerability to launch a remote command...