PT-2024-28914 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202302.e Description: The issue is related to an arbitrary file upload vulnerability in the /admin/cmsTemplate/savePlace component. This allows attackers to execute arbitrary code by uploading a crafted file...

PT-2019-19750

Name of the Vulnerable Software and Affected Versions OFCMS versions prior to 1.1.3 Description An issue in OFCMS allows directory traversal through the "admin/cms/template/getTemplates.html" endpoint, using ../ in the dir parameter. This enables writing arbitrary content, specified in the file...

CVE-2018-12494

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...