CVE-2018-12494

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...

CVE-2018-12493

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI...

CVE-2018-12494

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...

CVE-2018-12493

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI...

CVE-2018-12494

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...

CVE-2018-12493

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI...

CVE-2018-12493

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI...

CVE-2018-12494

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...

CVE-2018-12493

PublicCMS v4.0.20180210 is affected by a directory traversal and arbitrary file read vulnerability reachable through admin/cmsWebFile/list.html?path=../, enabling reading arbitrary server files. This is documented across multiple sources (CVE/CNVD/NVD) without details on patches in the provided d...

CVE-2018-12494

PublicCMS 4.0.20180210 is affected by a directory traversal and arbitrary file read vulnerability. The issue is reachable via the admin/cmsTemplate/content.html?path=../ URI, indicating that user-supplied path parameters can traverse the filesystem to read arbitrary files. Connected documents cor...

CVE-2018-12493: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?path=../ URI...

PT-2018-11216

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.20180210 Description An issue was discovered that allows for "Directory Traversal" and "Arbitrary file read" via the "/admin/cmsTemplate/content.html" API endpoint with a path variable set to ../. Recommendations For...

PT-2018-11215

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.20180210 Description An issue was discovered that allows for "Directory Traversal" and "Arbitrary file read" via the "/admin/cmsWebFile/list.html" API endpoint, specifically when the path parameter is set to ../...

CVE-2018-12494: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...

PublicCMS Cross-Site Request Forgery Vulnerability

PublicCMS is an open source content management system CMS written in Java. A cross-site request forgery vulnerability exists in 'admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list' in version 4.0.20180210 of PublicCMS . A remote attacker can exploit this vulnerability to add an...

Cross site request forgery (csrf)

An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account...

CVE-2018-11500

An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account...

CVE-2018-11500

An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account...

CVE-2018-11500

PublicCMS 4.0.20180210 contains a CSRF vulnerability in admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list that can be exploited to add an administrator account. This is the CVE-2018-11500 issue (NVD CVSSv3.0 base score 8.8; CVSSv2 base 6.8). The vulnerability is client-side re...

CVE-2018-11500: Cross-Site Request Forgery (CSRF)

An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account...