CVE-2020-8641

Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php pageslug parameter...

PT-2020-20250

Name of the Vulnerable Software and Affected Versions Lotus Core CMS version 1.0.1 Description The issue allows authenticated Local File Inclusion of .php files via directory traversal in the page slug parameter of the index.php page. Recommendations For Lotus Core CMS version 1.0.1, consider...

CVE-2018-6576

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...