PT-2022-24053 · Ftcms · Ftcms

Name of the Vulnerable Software and Affected Versions: ftcms version 2.1 Description: The issue allows an attacker to insert malicious JavaScript code into the web page, causing the user or administrator to trigger malicious code when accessing. This is a result of a XSS vulnerability in the...

ftcms arbitrary file writing vulnerability

ftcms is a content management system from ftcms. ftcms version 2.1 and previous versions have an arbitrary file write vulnerability, which originates from the lack of valid file checksum in admin/controllers/tp.php and can be exploited by attackers to cause arbitrary file writes...

CVE-2022-30063

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

CVE-2022-30063

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

CVE-2022-30063

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

Code injection

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

CVE-2022-30060

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

CVE-2022-30060

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

CVE-2022-30061

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

CVE-2022-30062

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

CVE-2022-30061

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

CVE-2022-30062

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

CVE-2022-30061

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

CVE-2022-30060

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

CVE-2022-30062

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

Code injection

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

Directory traversal

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

Code injection

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

CVE-2022-30063

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

CVE-2022-30063

CVE-2022-30063 affects ftcms version 2.1 and earlier. The issue enables remote code execution (highest impact) with network access and no privileges required per the accompanying metrics (CVSSv3.1: 9.8 CRITICAL; CVSSv2: 7.5 HIGH). No explicit root-cause details or remediation are provided in the ...