PT-2023-12173 · Kitecms · Kitecms

Name of the Vulnerable Software and Affected Versions: KiteCMS version 1.1 Description: A File Upload issue allows a remote attacker to execute arbitrary code via the uploadFile function. This enables the attacker to potentially gain control over the system. Recommendations: For KiteCMS version...

Improper access control

Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL...