EUVD-2026-72556

knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that allows unauthenticated attackers to read arbitrary files. Attackers can supply directory traversal sequences in the templateFile parameter to bypass path restrictions and read...

YUNUCMS Code Issues Vulnerabilities

YUNUCMS is a website CMS. YUNUCMS 2.2.6 and earlier versions have a code issue vulnerability, the vulnerability stems from the parameter templateFile in file /app/index/controller/Common.php has an arbitrary file upload vulnerability...

PT-2024-15715 · Unknown · Yunyou Cms

Name of the Vulnerable Software and Affected Versions: Yunyou CMS versions up to 2.2.6 Description: A critical vulnerability has been found in Yunyou CMS, affecting unknown code of the file /app/index/controller/Common.php. The manipulation of the templateFile argument leads to unrestricted uploa...

CVE-2011-4810

Multiple directory traversal vulnerabilities in WHMCompleteSolution WHMCS 3.x and 4.x allow remote attackers to read arbitrary files via the templatefile parameter to 1 submitticket.php and 2 downloads.php, and 3 the report parameter to admin/reports.php...

Directory traversal

Directory traversal vulnerability in clientarea.php in WHMCompleteSolution WHMCS 3.x.x allows remote attackers to read arbitrary files via an invalid action and a ../ dot dot slash in the templatefile parameter...

CVE-2011-4813

Directory traversal vulnerability in clientarea.php in WHMCompleteSolution WHMCS 3.x.x allows remote attackers to read arbitrary files via an invalid action and a ../ dot dot slash in the templatefile parameter...