Lucene search
+L

4 matches found

CNVD
CNVD
•added 2022/03/14 12:00 a.m.•79 views

Luocms arbitrary file writing vulnerability

Luocms v2.0 is an article management system. Luocms v2.0 is vulnerable to an arbitrary file-writing vulnerability that results from insufficient validation of filecontent submissions and filenamede filenames, which can be exploited to write arbitrary shell files via /admin/templates/templatemanag...

10CVSS2.9AI score0.0155EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/10 5:46 p.m.•21 views

CVE-2022-24609

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/templatemanage.php, an attacker can write an arbitrary shell file...

10CVSS7.4AI score0.0155EPSS
SaveExploits1References2
Prion
Prion
•added 2022/03/10 5:46 p.m.•25 views

Improper access control

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/templatemanage.php, an attacker can write an arbitrary shell file...

10CVSS9.5AI score0.0155EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/09 12:00 a.m.•6 views

CVE-2022-24609: Incorrect Authorization

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/templatemanage.php, an attacker can write an arbitrary shell file...

10CVSS8.3AI score0.0155EPSS
SaveExploits1References2
Rows per page
Query Builder