high7.8
CVE-2022-25486
CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php.
Impact
CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cuppacms | Cuppacms | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/CuppaCMS/CuppaCMS/issues/15
- https://github.com/CuppaCMS/CuppaCMS/issues/25
- https://github.com/hansmach1ne/MyExploits/tree/main/Multiple_LFIs_in_CuppaCMS_alerts
- https://github.com/CuppaCMS/CuppaCMS/issues/15
- https://github.com/CuppaCMS/CuppaCMS/issues/25
- https://github.com/hansmach1ne/MyExploits/tree/main/Multiple_LFIs_in_CuppaCMS_alerts