PT-2020-12218

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An arbitrary file read issue exists in the system/controller/backend/template.php file. Recommendations For QCMS version 3.0.1, update to a version that fixes this issue, as the current version allows for arbitra...

CVE-2008-5860

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...

CVE-2008-5860: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...