Exploit-for-CVE-2024-46987

Exploit-for-CVE-2024-46987 Exploit for CVE-2024-46987 usage: exploit.py -h --url URL --username USERNAME --password PASSWORD --file FILE Vulnerability Description Camaleon CMS is a content management system built on Ruby on Rails. A path traversal vulnerability in the MediaController...

CVE-2024-46987

CVE-2024-46987 - Camaleon CMS Authenticated Arbitrary File Read This repository contains a Proof of Concept PoC script for CVE-2024-46987 , which allows for arbitrary file reading LFI / Path Traversal on Camaleon CMS. Description A Path Traversal vulnerability has been identified in Camaleon CMS...

CVE-2024-46987

CVE-2024-46987 – Camaleon CMS Authenticated Path Traversal / Arbitrary File Read CVE-2024-46987 is an authenticated path traversal vulnerability CWE-22 in Camaleon CMS a Ruby on Rails-based content management system. It allows a logged-in user even with low privileges to read arbitrary files on t...

CVE-2026-110230

The software XBackBone versions through 3.8.2 is vulnerable to a missing authorization flaw in the POST /upload/{id}/vanity route. This vulnerability allows authenticated users to modify the upload share codes of other users by providing sequential upload IDs to the MediaController::createVanity(...

CVE-2026-110230 XBackBone through 3.8.2 Missing Authorization via Upload Vanity Endpoint

XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other users' upload share codes via the POST /upload/id/vanity route. Attackers can supply sequential upload ids to MediaController::createVanity to break existing share links and hija...

CVE-2026-110230: Missing Authorization

XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other users' upload share codes via the POST /upload/id/vanity route. Attackers can supply sequential upload ids to MediaController::createVanity to break existing share links and hija...

CVE-2026-2557

CVE-2026-2557 affects cskefu up to 8.0.1. The vulnerability is in the Upload function of MediaController.java (package com/cskefu/cc/controller/resource/MediaController.java) where the file upload path allows cross-site scripting. The issue is triggered remotely and exploit code is public (PoC). ...

CVE-2026-2556 cskefu Endpoint MediaController.java server-side request forgery

A security vulnerability has been detected in cskefu up to 8.0.1. This issue affects some unknown processing of the file com/cskefu/cc/controller/resource/MediaController.java of the component Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack may be...

PT-2026-8343

Name of the Vulnerable Software and Affected Versions cskefu versions up to 8.0.1 Description A security issue exists in cskefu that allows for server-side request forgery. The problem is related to the processing of the file com/cskefu/cc/controller/resource/MediaController.java within the...

CVE-2025-10471

ZKEACMS 4.3 is affected by a server-side request forgery in the Proxy function of src/ZKEACMS/Controllers/MediaController.cs. Manipulating the url argument enables remote exploitation, and public exploits exist. Impact is SSRF with potential access to internal resources; CVSS specifics vary by so...

CVE-2025-4258

A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu up to 4.2.0. Affected is the function Upload of the file \youkefu-master\src\main\java\com\ukefu\webim\web\handler\resource\MediaController.java. The manipulation of the argument imgFile leads to unrestricted...

Remote Code Execution

Camaleon CMS is vulnerable to Remote Code Execution. The vulnerability is due to insufficient path validation in the MediaController class, allowing attackers, after taking over an administrator account, to delete arbitrary files or folders. Additionally, the cropurl action may allow arbitrary fi...

GHSA-3HP8-6J24-M5GM Duplicate Advisory: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7x4w-cj9r-h4v9. This link is maintained to preserve external references. Original Description The actions defined inside of the MediaController class do not check whether a given path is inside a certain path e....

Duplicate Advisory: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7x4w-cj9r-h4v9. This link is maintained to preserve external references. Original Description The actions defined inside of the MediaController class do not check whether a given path is inside a certain path e....

Remote Code Execution

Camaleon CMS is vulnerable to Remote Code Execution. The vulnerability is due to missing path validation in the MediaController class, allowing an attacker to delete arbitrary files or folders. Additionally, the cropurl action may allow arbitrary file writes by any authenticated user, though it...

CVE-2024-46987

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...

CVE-2024-46987 Arbitrary path traversal in Camaleon CMS

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...

CVE-2024-46987 Arbitrary path traversal in Camaleon CMS

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...

CVE-2024-46987

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...

CVE-2024-46987

CVE-2024-46987 affects Camaleon CMS (Ruby on Rails). A path traversal flaw exists in the MediaController download_private_file endpoint, where the file parameter is not properly sanitized, allowing an authenticated user to read arbitrary server files (information disclosure). Affected versions ar...