CVE-2024-1925

CVE-2024-1925 affects Ctcms 2.1.2 in the Upsys.php admin controller, enabling unrestricted file upload. The vulnerability is exploitable remotely with high attack complexity; exploitation is reported publicly. No patch/version fix details are provided in the connected documents. Some sources reco...

CVE-2024-1925 Ctcms Upsys.php unrestricted upload

A vulnerability was found in Ctcms 2.1.2. It has been declared as critical. This vulnerability affects unknown code of the file ctcms/apps/controllers/admin/Upsys.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The complexity of an attack is rather high...

PT-2024-18427 · Ctcms · Ctcms

Name of the Vulnerable Software and Affected Versions: Ctcms version 2.1.2 Description: A critical issue has been identified, affecting the file ctcms/apps/controllers/admin/Upsys.php, which leads to unrestricted upload. The attack can be initiated remotely, with a rather high complexity, making...

Ctcms v2.0.2 Arbitrary File Download Vulnerability

Ctcms video system Ctcms video system is a PHP + Mysql development of video management system. Ctcms v2.0.2 has an arbitrary file download vulnerability that can be exploited by attackers to download arbitrary files and obtain sensitive information...

Arbitrary File Read Vulnerability in Ctcms v2.0.2

Ctcms video system Ctcms video system is a PHP + Mysql development of video management system. Ctcms v2.0.2 has an arbitrary file read vulnerability. An attacker can use this vulnerability to read critical system configuration files...

ctcms background Tp***.php file exists arbitrary file deletion vulnerability

ctcms is a fast website building system that runs on PHP+MYSQL environment. There is an arbitrary file deletion vulnerability in the ctcms background Tp.php file. An attacker can use this vulnerability to delete the site installation lock, resulting in site reinstallation...

Arbitrary File Read Vulnerability in ctcms

Chong Sheng Network Technology has developed Cscms Portal Content Management System, Ctcms Network Video Education Management System, Aggregate Payment, and a Multi-Merchant Entry Card Issuing Platform Management System. ctcms has an arbitrary file read vulnerability, an attacker can exploit the...

Command Execution Vulnerability in ctcms 2.0.2 Frontend

Ctcms video system Ctcms video system is a PHP + Mysql development of video management system. ctcms2.0.2 front-end command execution vulnerability, an attacker can exploit the vulnerability to execute arbitrary commands to obtain server information...

Command execution vulnerability in ctcms v2.0.2

Chong Sheng Network Technology has developed Cscms Portal Content Management System, Ctcms Network Video Education Management System, Aggregate Payment, and a Multi-Merchant Entry Card Issuing Platform Management System. A command execution vulnerability exists in ctcms v2.0.2, which can be...

xml entity injection vulnerability in ctcms version 2.0.2

Chongsheng Network Technology is an emerging network technology limited company. It has developed Cscms portal content management system, Ctcms network video education management system, polymerization payment, and a multi-merchant card issuance platform management system. ctcms2.0.2 version of t...

Code Execution Vulnerability in Ctcms Movie & TV System Backend

Ctcms is a fast website building system that runs on PHP+MYSQL environment. Code execution vulnerability exists in the backend of Ctcms movie and TV system. It allows attackers to upload exp files, execute commands, and gain server privileges...

Arbitrary File Deletion Vulnerability in Ctcms

Ctcms is a fast website building system that runs on PHP+MYSQL environment. Ctcms has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary File Download Vulnerability in Ctcms

Ctcms is a fast website building system that runs on PHP+MYSQL environment. Ctcms has an arbitrary file download vulnerability. An attacker can exploit this vulnerability to download arbitrary files...