Lucene search
+L

7 matches found

NVD
NVD
•added 2024/10/16 9:15 p.m.•29 views

CVE-2024-48180

ClassCMS =4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code...

9.8CVSS0.00611EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/16 12:00 a.m.•76 views

CVE-2024-48180

ClassCMS versions 4.8 and earlier are vulnerable to a file inclusion flaw within the nowView method located in /class/cms/cms.php. An attacker can exploit this by including a file previously uploaded to the /class/template directory, resulting in the execution of PHP code . As of the current docu...

9.8CVSS7.4AI score0.00611EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2024/10/16 12:00 a.m.•5 views

CVE-2024-48180

ClassCMS =4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code...

9.8CVSS0.00611EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/10/16 12:00 a.m.•33 views

CVE-2024-48180

ClassCMS =4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code...

0.00611EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/16 12:00 a.m.•13 views

CVE-2024-48180

ClassCMS =4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code...

7.1AI score0.00611EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/16 12:00 a.m.•4 views

CVE-2024-48180: Unrestricted Upload of File with Dangerous Type

ClassCMS =4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code...

9.8CVSS6.1AI score0.00611EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/16 12:00 a.m.•18 views

PT-2024-33014 · Classcms · Classcms

Name of the Vulnerable Software and Affected Versions: ClassCMS versions 4.8 and earlier Description: The issue allows for file inclusion in the nowView method in /class/cms/cms.php, which can include a file uploaded to the /class/template directory to execute PHP code. Recommendations: For...

9.8CVSS6.9AI score0.00611EPSS
SaveExploits0References6
Rows per page
Query Builder