critical9.8

CVE-2022-24609

Luocms v2.0 is affected by an incorrect access control vulnerability.

Impact

Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/template_manage.php, an attacker can write an arbitrary shell file.

Affected products

Vendor	Product	Affected versions
Luocms Project	Luocms	Version 2.0

Weakness classification

CWE-863

References

NVD record
CVE.org record
https://github.com/jsjbcyber/bug_report/blob/main/bug_p
https://github.com/jsjbcyber/bug_report/blob/main/bug_p