2 matches found
CVE-2022-37191
The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using function parameter value as LFI payload...
7.1CVSS0.03578EPSS
SaveExploits1References2
CVE-2022-37191: Inclusion of Functionality from Untrusted Control Sphere
The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using function parameter value as LFI payload...
6.5CVSS6.7AI score0.03578EPSS
SaveExploits1References2
20