high8.6
CVE-2020-24136
Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename parameter to wex/htm…
Impact
Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename parameter to wex/html.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wcms | Wcms | Version 0.3.2 |