9 matches found
CVE-2024-34315
CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fckeditaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...
CVE-2024-34315
CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fckeditaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...
CVE-2024-34314
CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fetchaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...
CVE-2024-34314
CmsEasy version v7.7.7.9 is susceptible to a local file inclusion vulnerability within the fetch_action method of /admin/template_admin.php. The root cause is the improper use of the file_get_contents function, which allows an attacker to read arbitrary files on the system. To mitigate this risk,...
CVE-2024-34314: Improper Control of Filename for Include/Require Statement in PHP Program
CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fetchaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...
CVE-2024-25828: Path Traversal: 'dir/../../filename'
cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/templateadmin.php...
CVE-2024-25828
The cmseasy content management system (CMS), specifically version V7.7.7.9 , is vulnerable to an arbitrary file deletion vulnerability within the lib/admin/template_admin.php file. This security flaw is categorized as a Path Traversal (CWE-27) issue. The impact allows for the unauthorized deletio...
