Shirne CMS 1.2.0 - Local File Inclusion

Shirne CMS 1.2.0 is vulnerable to local file inclusion which could cause arbitrary file read via /static/ueditor/php/controller.php. id: CVE-2022-37299 info: name: Shirne CMS 1.2.0 - Local File Inclusion author: pikpikcu severity: medium description: Shirne CMS 1.2.0 is vulnerable to local file...

CVE-2022-37299

An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php...

CVE-2022-37299

creationtimestamp| type| source ---|---|--- 2022-09-09 18:29:30+00:00| seen| https://t.me/cibsecurity/49511 2025-07-08 21:02:42+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75jrzff2w...

CVE-2022-37299

Shirne CMS version 1.2.0 is affected by a Path Traversal vulnerability (also described as Local File Inclusion) located in the /static/ueditor/php/controller.php endpoint. This flaw allows an attacker to perform an arbitrary file read , which could lead to unauthorized access to sensitive files, ...