CVE-2022-30062

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

Directory traversal

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

Code injection

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

Code injection

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

CVE-2022-30063

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

CVE-2022-30063

CVE-2022-30063 affects ftcms version 2.1 and earlier. The issue enables remote code execution (highest impact) with network access and no privileges required per the accompanying metrics (CVSSv3.1: 9.8 CRITICAL; CVSSv2: 7.5 HIGH). No explicit root-cause details or remediation are provided in the ...

CVE-2022-30062

CVE-2022-30062 affects ftcms

CVE-2022-30060

CVE-2022-30060 affects ftcms (

CVE-2022-30061

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

CVE-2022-30061

CVE-2022-30061 affects ftcms

PT-2022-19998

Name of the Vulnerable Software and Affected Versions ftcms versions prior to 2.1 Description The issue allows for code execution attacks. Recommendations For versions prior to 2.1, update to a version that is not affected by this issue...

PT-2022-19997

Name of the Vulnerable Software and Affected Versions ftcms versions prior to 2.2 Description The issue allows for Arbitrary File Read via the tp.php endpoint. Recommendations For versions prior to 2.2, update to a version that is not affected by this issue...

PT-2022-19995

Name of the Vulnerable Software and Affected Versions ftcms versions prior to 2.2 Description The issue allows for Arbitrary File Write via the admin/controllers/tp.php endpoint. Recommendations For versions prior to 2.2, update to a version that is not affected by this issue. As a temporary...

CVE-2022-30063: Undefined Security Weakness

ftcms =2.1 was discovered to be vulnerable to code execution attacks...

CVE-2022-30062: Improper Limitation of a Pathname to a Restricted Directory

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php...

CVE-2022-30061: Improper Limitation of a Pathname to a Restricted Directory

ftcms =2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp...

FTCMS security vulnerabilities

ftcms is a content management system from ftcms. ftcms version 2.1 and previous versions have an arbitrary file write vulnerability, which originates from the lack of valid file checksum in admin/controllers/tp.php and can be exploited by attackers to cause arbitrary file writes...

FTCMS path traversal vulnerability

ftcms is a content management system from ftcms. A security vulnerability exists in ftcms version 2.1 and earlier versions, which can be exploited by an attacker to conduct a directory traversal attack via the tp parameter...

CVE-2022-30060: Undefined Security Weakness

ftcms =2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php...

PT-2022-19996

Name of the Vulnerable Software and Affected Versions ftcms versions prior to 2.1 Description The issue allows directory traversal attacks via the tp parameter. Recommendations For versions prior to 2.1, consider restricting access to the vulnerable parameter tp to minimize the risk of...