VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 15, 2023· Updated Dec 18, 2024

CVE-2023-34880

CVE-2023-34880

Description

cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion.

Affected products

2
  • Cmseasy/Cmseasycpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: = v7.7.7.7 20230520

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.