CVE-2023-30267

CLTPHP versions prior to 6.0 are vulnerable to Cross-Site Scripting (XSS) through the Changyan.php file in application/home/controller/Changyan.php. The root cause is insufficient user-supplied data filtering/escaping in Changyan.php, enabling injection of malicious script. Affected: CLTPHP

CVE-2023-30267

CLTPHP =6.0 is vulnerable to Cross Site Scripting XSS via application/home/controller/Changyan.php...

CVE-2023-30269

CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...

CVE-2023-30265

CLTPHP =6.0 is vulnerable to Directory Traversal...

CVE-2023-30266

CVE-2023-30266 affects CLTPHP versions 6.0 and earlier, vulnerable to Unrestricted Upload of File with Dangerous Type. The issue is a file upload vulnerability described across multiple sources; no concrete fix version is provided in the connected documents. The CVSSv3.1 base score is 8.8 (High) ...

PT-2023-22617 · Cltphp · Cltphp

Name of the Vulnerable Software and Affected Versions: CLTPHP versions prior to 6.0 Description: The issue concerns Cross Site Scripting XSS via the application/home/controller/Changyan.php file. Recommendations: For versions prior to 6.0, update to a version that includes the fix for this issue ...

CVE-2022-1085

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-1085

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

Cross site scripting

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-1085

CVE-2022-1085 concerns CLTPHP up to v6.0. The vulnerability implicates the POST Parameter Handler, enabling cross-site scripting via remote manipulation. Multiple connected sources (NVD entry, Red Hat advisory, CVE records, and related risk enrichments) consistently describe the flaw as a client-...

CVE-2022-1085 CLTPHP POST Parameter cross site scripting

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-1085 CLTPHP POST Parameter cross site scripting

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2022-1085: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CLTPHP 跨站脚本漏洞

CLTPHP is an open source PHP content management system for efficient website building. CLTPHP suffers from a cross-site scripting vulnerability that allows an attacker to inject arbitrary html and script code into a website...

Arbitrary File Deletion Vulnerability in CLTPHP

CLTPHP is a PHP content management system and an open source CMS system. CLTPHP has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

SQL Injection Vulnerability in CLTPHP (CNVD-2021-46734)

CLTPHP is a website builder based on thinkphp. CLTPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Command Execution Vulnerability in CLTPHP

CLTPHP is a website building system based on thinkphp. CLTPHP has a command execution vulnerability, through which an attacker can obtain server privileges...

SQL Injection Vulnerability in CLTPHP (CNVD-2021-46596)

CLTPHP is a website builder based on thinkphp. CLTPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in CLTPHP (CNVD-2021-46595)

CLTPHP is a website builder based on thinkphp. CLTPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in CLTPHP (CNVD-2021-47679)

CLTPHP is a website building system based on thinkphp. CLTPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...