Input validation

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

Cross site scripting

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

Unrestricted file upload

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2023-30265

CLTPHP =6.0 is vulnerable to Directory Traversal...

CVE-2023-30267

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

PT-2023-22617 · Cltphp · Cltphp

Name of the Vulnerable Software and Affected Versions: CLTPHP versions prior to 6.0 Description: The issue concerns Cross Site Scripting XSS via the application/home/controller/Changyan.php file. Recommendations: For versions prior to 6.0, update to a version that includes the fix for this issue ...

CVE-2023-30269

CLTPHP

CVE-2023-30265

CVE-2023-30265 affects CLTPHP versions prior to 6.1 (CLTPHP

PT-2023-22616 · Cltphp · Cltphp

Name of the Vulnerable Software and Affected Versions: CLTPHP versions 6.0 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types. Recommendations: For versions 6.0 and earlier, at the moment, there is no information about a newer version that contains...

CLTPHP 路径遍历漏洞

CLTPHP is an open source PHP content management system for efficient website building. A security vulnerability exists in CLTPHP version 6.0 and earlier versions. An attacker exploited the vulnerability to read arbitrary files on the server running the application...

CVE-2023-30266

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2023-30269

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

CVE-2023-30266

CLTPHP =6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2023-30266

CVE-2023-30266 affects CLTPHP versions 6.0 and earlier, vulnerable to Unrestricted Upload of File with Dangerous Type. The issue is a file upload vulnerability described across multiple sources; no concrete fix version is provided in the connected documents. The CVSSv3.1 base score is 8.8 (High) ...

CVE-2023-30269

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

CVE-2023-30267

CLTPHP versions prior to 6.0 are vulnerable to Cross-Site Scripting (XSS) through the Changyan.php file in application/home/controller/Changyan.php. The root cause is insufficient user-supplied data filtering/escaping in Changyan.php, enabling injection of malicious script. Affected: CLTPHP

CVE-2023-30265

CLTPHP =6.0 is vulnerable to Directory Traversal...

CVE-2023-30267

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

CVE-2022-1085

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-1085

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...