CVE-2024-34315

CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the filegetcontents function in the fckeditaction method of /admin/templateadmin.php. This vulnerability allows attackers to read arbitrary files...

CVE-2024-34315

The content management system CmsEasy version 7.7.7.9 is vulnerable to a local file inclusion (LFI) flaw. The root cause is the improper use of the file_get_contents function within the fckedit_action method of the /admin/template_admin.php file. This vulnerability allows an attacker to read arbi...