Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3p3h-5g54-qmc8

Опубликовано: 16 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code.

ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code.

EPSS

Процентиль: 48%
0.00611
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code.

EPSS

Процентиль: 48%
0.00611
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434