OFCMS Backend Directory Traversal Vulnerability

OFCMS is a content management system based on Java technology. Versions of OFCMS prior to 1.1.3 have an admin/cms/template/getTemplates.html?respath=res&updir=... /directory traversal vulnerability. An attacker can exploit the vulnerability to traverse directory information...

PT-2019-19750

Name of the Vulnerable Software and Affected Versions OFCMS versions prior to 1.1.3 Description An issue in OFCMS allows directory traversal through the "admin/cms/template/getTemplates.html" endpoint, using ../ in the dir parameter. This enables writing arbitrary content, specified in the file...

PT-2019-19749

Name of the Vulnerable Software and Affected Versions OFCMS versions prior to 1.1.3 Description An issue was discovered related to directory traversal. This issue is connected to the getTemplates function in TemplateController.java and can be exploited through the...