CVE-2022-37299

An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php...

CVE-2022-37299

An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php...

PT-2022-23911 · Unknown · Shirne Cms

Name of the Vulnerable Software and Affected Versions: Shirne CMS version 1.2.0 Description: The issue is related to a Path Traversal vulnerability that could cause arbitrary file read. This is possible via the /static/ueditor/php/controller.php endpoint. Recommendations: For Shirne CMS version...