EUVD-2021-26595

Malware in sbrugna...

Design/Logic Flaw

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...

CVE-2021-3256

KuaiFanCMS V5.x has an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file. The issue stems from the html_url parameter handling in that module, allowing an attacker to read arbitrary files and potentially obtain sensitive information. Multiple sources (C...

CVE-2021-3256

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...

CVE-2021-3256

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...

PT-2021-19781

Name of the Vulnerable Software and Affected Versions KuaiFanCMS versions 5.x Description The issue is related to an arbitrary file read vulnerability. It is located in the html url parameter of the chakanhtml.module.php file. Recommendations For KuaiFanCMS versions 5.x, avoid using the html url...

CVE-2021-3256: Improper Neutralization of Argument Delimiters in a Command

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...