Lucene search
Lepton-cmsLeptoncms7.0.0
2 matches found
CVE-2024-24399
An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area.
7.2CVSS7.2AI score0.01678EPSS
CVE-2024-24520
An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place.
7.8CVSS7.5AI score0.00153EPSS