CVE-2024-40547

PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace...

PT-2024-28909

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.202302.e Description The issue is related to a Server-Side Request Forgery SSRF that can be exploited via the component /admin/maintenance sysTask/edit. Recommendations For PublicCMS version 4.0.202302.e, consider...

CVE-2024-40552

PublicCMS v4.0.202302.e was discovered to contain a remote commande execution RCE vulnerability via the cmdarray parameter at /site/ScriptComponent.java...

CVE-2024-40549

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...

PT-2024-28917

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.202302.e Description A remote command execution issue was discovered, allowing attackers to execute commands via the cmdarray parameter at the /site/ScriptComponent.java endpoint. Recommendations For PublicCMS version...

CVE-2024-40548

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-40548: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-40551: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-40547: Improper Access Control

PublicCMS v4.0.202302.e was discovered to contain an arbitrary file content replacement vulnerability via the component /admin/cmsTemplate/replace...

CVE-2024-40546

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-40543

CVE-2024-40543 affects PublicCMS v4.0.202302.e and is caused by a Server-Side Request Forgery (SSRF) via the /admin/ueditor?action=catchimage component. Public sources in Red Hat, OSV, NVD, CNNVD and PT-Research describe the flaw as enabling the server to forge requests. The connected documents c...

CVE-2024-40546: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-40551

PublicCMS v4.0.202302.e contains an arbitrary file upload vulnerability in the /admin/cmsTemplate/doUpload endpoint, enabling code execution via a crafted upload. The issue is documented across multiple sources (NVD/Red Hat/OSV/CNNVD) with the same description. Connected material from PT-Security...

CVE-2024-40549

PublicCMS v4.0.202302.e is affected by CVE-2024-40549 due to an arbitrary file upload vulnerability in the /admin/cmsTemplate/savePlace component, which can allow an attacker to execute arbitrary code via a crafted file. The CVE is documented across multiple feeds (NVD, Red Hat, CNNVD, OSV, etc.)...

CVE-2024-40544

PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery SSRF via the component /admin/maintenancesysTask/edit...

CVE-2024-40547

PublicCMS v4.0.202302.e contains an arbitrary file content replacement vulnerability reachable via the /admin/cmsTemplate/replace endpoint. Affects the PublicCMS 4.0.202302.e release; root cause details describe arbitrary file content replacement through the specified API. Impact is privacy/integ...

CVE-2024-40548

PublicCMS 4.0.202302.e contains an arbitrary file upload flaw in /admin/cmsTemplate/save that can lead to arbitrary code execution when a crafted file is uploaded. The CVSSv3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and require low privileges. Exploitation status is ...

CVE-2024-40546

PublicCMS v4.0.202302.e contains an arbitrary file upload vulnerability in the /admin/cmsWebFile/save component that allows an attacker to execute arbitrary code by uploading a crafted file. CVSS v3.1 shows high impact (C, I, A), with network access, low attack complexity, and privileges required...

CVE-2024-40544: Server-Side Request Forgery (SSRF)

PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery SSRF via the component /admin/maintenancesysTask/edit...

CVE-2024-40549: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file...