Lotus Core CMS 1.0.1 - Local File Inclusion

Lotus Core CMS 1.0.1 allows authenticated local file inclusion of .php files via directory traversal in the index.php pageslug parameter. id: CVE-2020-8641 info: name: Lotus Core CMS 1.0.1 - Local File Inclusion author: 0xAkoko severity: high description: Lotus Core CMS 1.0.1 allows authenticated...

CVE-2020-8641

Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php pageslug parameter...

CVE-2020-8641

Lotus Core CMS 1.0.1 is affected by an authenticated Local File Inclusion (LFI) vulnerability in index.php?page_slug, allowing traversal to access .php files. This is due to an insufficiently validated page_slug parameter, enabling access to unintended local files and potentially remote code exec...