CVE-2024-34315

CmsEasy v7.7.7.9 contains a local file inclusion vulnerability exposed via the file_get_contents call inside the fckedit_action method of /admin/template_admin.php. This allows an attacker to read arbitrary files on the server. The CVE CVE-2024-34315 is documented across NVD/Red Hat/CNVD and rela...

CVE-2024-34315

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fckeditaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...