PT-2018-12659

Name of the Vulnerable Software and Affected Versions Gxlcms version 1.1.4 Description The issue allows remote attackers to read arbitrary files. This is related to a crafted request to the "index.php?s=Admin-Tpl-ADD-id" endpoint, specifically targeting the add function in the TplAction.class.php...

CVE-2018-14685: Exposure of Sensitive Information to an Unauthorized Actor

The add function in www/Lib/Lib/Action/Admin/TplAction.class.php in Gxlcms v1.1.4 allows remote attackers to read arbitrary files via a crafted index.php?s=Admin-Tpl-ADD-id request, related to Lib/Common/Admin/function.php...

CVE-2018-9851: Improper Limitation of a Pathname to a Restricted Directory

In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to read any file via a modified pathname in an Admin-Tpl request, as demonstrated by use of '|' instead of '/' as a directory separator, in conjunction with a ".." sequence...

CVE-2018-9847

In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this code into a template...

CVE-2018-9847: Improper Control of Generation of Code

In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this code into a template...

PT-2018-19071

Name of the Vulnerable Software and Affected Versions Gxlcms QY version 1.0.0713 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by placing the malicious code into a template, which is then executed by the update function in the TplAction.class.php...

CVE-2017-14979: Undefined Security Weakness

Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, related to Lib/Admin/Action/TplAction.class.php and Lib/Admin/Common/function.php...

PT-2017-13798

Name of the Vulnerable Software and Affected Versions Gxlcms affected versions not specified Description The issue allows remote attackers to read arbitrary files via modified pathnames in the s parameter to "index.php". This is related to Lib/Admin/Action/TplAction.class.php and...