Lucene search
K

8 matches found

CNVD
CNVD
added 2022/03/17 12:0 a.m.33 views

CuppaCMS alertConfigField.php file contains a vulnerability

CuppaCMS is a content management system CMS, and a file inclusion vulnerability exists in CuppaCMS version 1.0. The vulnerability stems from the fact that the url parameter in /alerts/alertConfigField.php does not effectively filter calls to local file resources, which could be exploited to read...

7.8CVSS3AI score0.6591EPSS
Exploits1References1
OSV
OSV
added 2022/03/15 6:15 p.m.1 views

CVE-2022-25486

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...

7.8CVSS5.8AI score
Exploits0References3
Prion
Prion
added 2022/03/15 6:15 p.m.15 views

Design/Logic Flaw

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...

6.8CVSS7.5AI score0.6591EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/15 6:15 p.m.1 views

CVE-2022-25486

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...

7.8CVSS5.3AI score0.6591EPSS
Exploits1References5
CVE
CVE
added 2022/03/15 5:41 p.m.118 views

CVE-2022-25486

CVE-2022-25486 affects CuppaCMS v1.0 and is a local file inclusion in the /alerts/alertConfigField.php endpoint via the url parameter. Root cause: insufficient filtering of local file resources. Impact (as described in connected sources): unauthorized access, sensitive information disclosure, and...

7.8CVSS7.5AI score0.6591EPSS
In wildExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/03/15 5:41 p.m.14 views

CVE-2022-25486

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...

7.8AI score0.6591EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.1 views

CuppaCMS 安全漏洞

CuppaCMS is a content management system CMS, and a file inclusion vulnerability exists in CuppaCMS version 1.0. The vulnerability stems from the fact that the url parameter in /alerts/alertConfigField.php does not effectively filter calls to local file resources, which could be exploited to read...

7.8CVSS5.5AI score0.6591EPSS
Exploits1References4
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.24 views

Cuppa CMS (alertConfigField.php, urlConfig param) - Remote/Local File Inclusion

No description provided by source. Exploit Title : Cuppa CMS File Inclusion Date : 4 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://www.cuppacms.com/ Software Link : http://jaist.dl.sourceforge.net/project/cuppacms/cuppacms.zip Version : Beta Tested on :...

7.1AI score
Exploits0
Rows per page
Query Builder