PT-2025-3402 · Classcms · Classcms

Name of the Vulnerable Software and Affected Versions: ClassCMS version 4.8 Description: The issue allows attackers to execute arbitrary code and potentially take control of the server by constructing a payload in the classview parameter of the model management feature. This enables them to explo...

ClassCMS security vulnerabilities

ClassCMS is a simple, flexible, secure and easy to expand content management system from China ClassCMS open source. A security vulnerability exists in ClassCMS version 4.8, which stems from a code execution vulnerability that allows an attacker to execute arbitrary code by constructing a payload...

CVE-2024-57099: Improper Control of Generation of Code

ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to execute arbitrary code and potentially take control of the server...