CVE-2020-24136

Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename parameter to wex/html.php...

CVE-2020-24136

CVE-2020-24136 affects WCMS version 0.3.2. The vulnerability is a directory traversal in the media path exposed by the pagename parameter to wex/html.php, allowing an attacker to read arbitrary files on the server running the application. The issue is documented consistently across multiple conne...