CVE-2024-0523: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CmsEasy up to 7.7.7. It has been declared as critical. Affected by this vulnerability is the function getslidechildaction in the library lib/admin/languageadmin.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely. The...

CVE-2023-34880

CVE-2023-34880 affects CmsEasy CMS v7.7.7.7 (20230520) and is caused by a path traversal vulnerability in the add_action method of lib/admin/language_admin.php. The issue allows an attacker to execute arbitrary code and perform local file inclusion (LFI). Documents indicate high-severity impact (...

CVE-2023-34880

cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the addaction method at lib/admin/languageadmin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion...

CVE-2023-34880: Improper Limitation of a Pathname to a Restricted Directory

cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the addaction method at lib/admin/languageadmin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion...