high8.8
CVE-2020-8641
Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php page_slug parameter.
Impact
Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php page_slug parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lotus Core Cms Project | Lotus Core Cms | Version 1.0.1 |