3 matches found
CVE-2020-21590
Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter...
5.3CVSS0.01255EPSS
SaveExploits1References2
CVE-2020-21590: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter...
4.3CVSS5.9AI score0.01255EPSS
SaveExploits1References2
PT-2021-10645
Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: The issue allows attackers to list files in arbitrary directories via the dir parameter in the coreframe/app/template/admin/index.php file. This is a directory traversal issue that can be exploited by...
4.3CVSS0.01255EPSS
SaveExploits1References4
20