100 matches found
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
Cross site scripting
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...
Design/Logic Flaw
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2022-38296
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager...
CVE-2022-38296
CVE-2022-38296 (Cuppa CMS v1.0) : The connected sources confirm an arbitrary file upload vulnerability via the File Manager. Nuclei indicates the impact could be remote code execution on the affected system. The CVE entry lists a 9.8 CVSS v3.1 score. Remediation guidance in the connected document...
CVE-2022-38295
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...
CVE-2022-38295
CVE-2022-38295 affects Cuppa CMS v1.0. The vulnerability is a cross-site scripting flaw in the Add New Group workflow, exploitable via a crafted payload in the Name field at /table_manager/view/cu_user_groups, allowing execution of arbitrary web scripts/HTML. Public docs identify the impact as ex...
PT-2022-24346 · Cuppacms · Cuppacms
Name of the Vulnerable Software and Affected Versions: Cuppa CMS version 1.0 Description: The issue is related to an arbitrary file upload vulnerability via the File Manager. This allows for potential malicious file uploads. Recommendations: For Cuppa CMS version 1.0, consider disabling the File...
PT-2022-24345 · Cuppacms · Cuppacms
Name of the Vulnerable Software and Affected Versions: Cuppa CMS version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function at the "/table manager/view/cu user groups" API endpoin...
CVE-2022-34121
Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...
CVE-2022-34121
Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...
CVE-2022-34121
Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...
Design/Logic Flaw
Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...
CVE-2022-34121
Cuppa CMS v1.0 was discovered to contain a local file inclusion LFI vulnerability via the component /templates/default/html/windows/right.php...
CVE-2022-34121
Cuppa CMS v1.0 is vulnerable to a local file inclusion (LFI) through the component /templates/default/html/windows/right.php . The issue, described across sources, enables unauthorized access and disclosure of sensitive information, with potential remote code execution implied by some references....
PT-2022-22015 · Cuppacms · Cuppacms
Name of the Vulnerable Software and Affected Versions: Cuppa CMS version 1.0 Description: The issue is related to a local file inclusion LFI vulnerability. It affects the component /templates/default/html/windows/right.php. Recommendations: For Cuppa CMS version 1.0, consider restricting access t...
CuppaCMS 代码问题漏洞
CuppaCMS is a content management system and the vulnerability exploits the component /jqueryfileupload/server/php/index.php to allow attackers to upload arbitrary files.A remote code execution vulnerability exists in CuppaCMS, which allows attackers to execute arbitrary code via a carefully craft...
CVE-2022-25401
The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting attackers read access to arbitrary files...