4 matches found
EUVD-2018-2112
Malware in sbrugna...
Path traversal
joyplus-cms 1.6.0 allows manager/adminpic.php?rootpath= absolute path traversal...
CVE-2019-17175
joyplus-cms 1.6.0 allows manager/adminpic.php?rootpath= absolute path traversal...
Design/Logic Flaw
joyplus-cms 1.6.0 has XSS in adminplayer.php, related to manager/index.php "system manage" and "add" actions...