CVE-2024-11123

A vulnerability, which was classified as problematic, was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. This affects an unknown part of the file /crm/data/pdf.php. The manipulation of the argument url with the input ../config.inc.php leads to path traversal. It is possible to initiate the...

CVE-2024-11123

creationtimestamp| type| source ---|---|--- 2024-11-12 13:03:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113470118653267698 2024-11-12 13:06:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113470132330340124 2025-05-06 14:49:58+00:00| seen|...

CVE-2024-11123 上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal

A vulnerability, which was classified as problematic, was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. This affects an unknown part of the file /crm/data/pdf.php. The manipulation of the argument url with the input ../config.inc.php leads to path traversal. It is possible to initiate the...

CVE-2024-11123

Lingdang CRM up to 8.6.4.3 exposes a path traversal issue in /crm/data/pdf.php via the url parameter, where input like ../config.inc.php can be manipulated to traverse the filesystem. The vulnerability allows remote initiation and has publicly disclosed exploits. Root cause is improper handling o...

CVE-2024-11123 上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal

A vulnerability, which was classified as problematic, was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. This affects an unknown part of the file /crm/data/pdf.php. The manipulation of the argument url with the input ../config.inc.php leads to path traversal. It is possible to initiate the...