CVE-2018-12065

CVE-2018-12065 describes a Local File Inclusion in Creatiwity wityCMS 0.6.2. The vuln occurs in /system/WCore/WHelper.php where an attacker can replace helper.json to include local PHP files (potentially executing PHP code) or read non-PHP files. Multiple connected sources corroborate this LFI at...