CVE-2024-34315

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fckeditaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...

CVE-2024-34314

CmsEasy version v7.7.7.9 is susceptible to a local file inclusion vulnerability within the fetch_action method of /admin/template_admin.php. The root cause is the improper use of the file_get_contents function, which allows an attacker to read arbitrary files on the system. To mitigate this risk,...

CVE-2024-34315

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fckeditaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...

CVE-2024-34314: Improper Control of Filename for Include/Require Statement in PHP Program

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fetchaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...

CVE-2024-34314

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fetchaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...

CVE-2024-25828

cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/templateadmin.php...

CVE-2024-25828: Path Traversal: 'dir/../../filename'

cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/templateadmin.php...

CVE-2024-25828

cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/templateadmin.php...

CVE-2024-25828

The cmseasy content management system (CMS), specifically version V7.7.7.9 , is vulnerable to an arbitrary file deletion vulnerability within the lib/admin/template_admin.php file. This security flaw is categorized as a Path Traversal (CWE-27) issue. The impact allows for the unauthorized deletio...