Low severity3.5NVD Advisory· Published Jun 14, 2023· Updated Jun 17, 2026

CVE-2023-3241

Description

A vulnerability was found in OTCMS up to 6.62 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/read.php?mudi=announContent. The manipulation of the argument url leads to path traversal. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231512.

Affected products

Otcms/Otcms3 versions
cpe:2.3:a:otcms:otcms:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:otcms:otcms:*:*:*:*:*:*:*:*range: <=6.62
- (no CPE)range: <=6.62
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/HuBenLab/HuBenVulList/blob/main/OTCMS%20was%20discovered%20to%20contain%20an%20arbitrary%20file%20read%20vulenrability%20via%20the%20filename.mdnvdExploit
vuldb.comnvdPermissions RequiredThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000