PublicCMS Remote Code Execution Vulnerability

PublicCMS is an open source content management system CMS written in Java. A security vulnerability exists in PublicCMS version 4.0.20180210. A remote attacker can exploit this vulnerability by uploading a ZIP archive file containing a .jsp file with a directory traversal pathname to execute...

PublicCMS path traversal vulnerability (CNVD-2018-16529)

PublicCMS is an open source content management system CMS written in Java. A directory traversal vulnerability exists in PublicCMS version 4.0.20180210. An attacker can read arbitrary files with the help of admin/cmsTemplate/content.html?path=... / URL to read arbitrary files...

PublicCMS Cross-Site Request Forgery Vulnerability

PublicCMS is an open source content management system CMS written in Java. A cross-site request forgery vulnerability exists in 'admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list' in version 4.0.20180210 of PublicCMS . A remote attacker can exploit this vulnerability to add an...