CVE-2024-48180

ClassCMS versions 4.8 and earlier are vulnerable to a file inclusion flaw within the nowView method located in /class/cms/cms.php. An attacker can exploit this by including a file previously uploaded to the /class/template directory, resulting in the execution of PHP code . As of the current docu...

CVE-2024-48180

ClassCMS =4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code...