CVE-2017-14979

Gxlcms (enterprise website creation system) is affected by CVE-2017-14979. The vulnerability arises from an unsafe character-replacement method intended to restrict access, enabling remote attackers to read arbitrary files by altering the s parameter in index.php. Affected components include Lib/...