CVE-2022-25486

creationtimestamp| type| source ---|---|--- 2022-03-15 21:19:38+00:00| seen| https://t.me/cibsecurity/38965 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-03-16 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CVE-2022-25486

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php...

CVE-2022-25486

CVE-2022-25486 affects CuppaCMS v1.0 and is a local file inclusion in the /alerts/alertConfigField.php endpoint via the url parameter. Root cause: insufficient filtering of local file resources. Impact (as described in connected sources): unauthorized access, sensitive information disclosure, and...