Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fr2p-xv84-p648

Опубликовано: 16 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 4.7

Описание

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

EPSS

Процентиль: 17%
0.00053
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-74
CWE-94

Связанные уязвимости

CVSS3: 4.7
nvd
около 2 месяцев назад

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

EPSS

Процентиль: 17%
0.00053
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-74
CWE-94