WCMS 路径遍历漏洞

WCMS is a content management system CMS. A security vulnerability exists in WCMS version v.0.3.2. An attacker can exploit the vulnerability to execute arbitrary code via the wex/cssjs.php parameter...

CVE-2020-19902: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter...

PT-2023-11540 · Unknown · Cryptoprof Wcms

Name of the Vulnerable Software and Affected Versions: Cryptoprof WCMS version 0.3.2 Description: A Directory Traversal issue allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter. Recommendations: For Cryptoprof WCMS version 0.3.2, consider restricting access to the...

CVE-2020-19902

Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter...

CVE-2020-19902

Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php parameter...

Server side request forgery (ssrf)

Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services...

CVE-2020-24137

Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter to wex/cssjs.php...

CVE-2020-24139

Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services...

CVE-2020-24135

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inject arbitrary web script and HTML via the type parameter to wex/cssjs.php...

PT-2021-11008

Name of the Vulnerable Software and Affected Versions: Wcms version 0.3.2 Description: A directory traversal issue allows an attacker to read arbitrary files on the server via the path parameter to "wex/cssjs.php". Recommendations: For Wcms version 0.3.2, avoid using the path parameter in the...

PT-2021-11006

Name of the Vulnerable Software and Affected Versions: Wcms version 0.3.2 Description: A Reflected Cross Site Scripting XSS issue was discovered, allowing remote attackers to inject arbitrary web script and HTML via the type parameter to "wex/cssjs.php". Recommendations: For Wcms version 0.3.2,...

CVE-2020-24135: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inject arbitrary web script and HTML via the type parameter to wex/cssjs.php...

CVE-2020-24137: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter to wex/cssjs.php...

CVE-2020-24139: Server-Side Request Forgery (SSRF)

Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services...

PT-2021-11010

Name of the Vulnerable Software and Affected Versions: Wcms version 0.3.2 Description: The issue allows an attacker to send crafted requests from the back-end server of a vulnerable web application via the path parameter to "wex/cssjs.php". This can be used to identify open ports, local network...