medium6.5
CVE-2021-31731
A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Templat…
Impact
A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kitesky | Kitecms | Version 1.1.1 |