PT-2023-25046 · Cmseasy · Cmseasy
CVE-2023-34880
·
Publicado
2023-06-15
·
Atualizado
2023-06-26
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
cmseasy version 7.7.7.7
Description
A path traversal issue was discovered, allowing attackers to execute arbitrary code and perform local file inclusion via the
add action method at lib/admin/language admin.php.Recommendations
For version 7.7.7.7, consider restricting access to the
add action method in lib/admin/language admin.php to minimize the risk of exploitation until a patch is available.Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cmseasy