Creatiwity wityCMS Local File Inclusion Vulnerability

Creatiwity wityCMS is a lightweight PHP-based model-view-controller-oriented content management system CMS. A local file inclusion vulnerability exists in the /system/WCore/WHelper.php file in Creatiwity wityCMS version 0.6.2. A remote attacker can exploit this vulnerability by replacing the...

PT-2018-10982

Name of the Vulnerable Software and Affected Versions Creatiwity wityCMS version 0.6.2 Description A Local File Inclusion issue in the /system/WCore/WHelper.php file allows remote attackers to include local PHP files, which can lead to the execution of PHP code, or read non-PHP files by replacing...

CVE-2018-12065: Improper Input Validation

A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files execute PHP code or read non-PHP files by replacing a helper.json file...