CVE-2020-19890

DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $GET'file' is filename,and as there is no filter function for security, you can read any file's content...

CVE-2020-19890

CVE-2020-19890 affects DBHcms v1.2.0. An arbitrary file read flaw exists in the file path handling for the editor module (dbhcms/mod/mod.editor.php) where $_GET['file'] is not filtered, allowing reading of arbitrary files. This is a server-side vulnerability impacting confidentiality; the provide...