Skip to content
OpenAdvisories

Product · chshcms

mccms

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.4

    chshcms mccms Backups.php restore_del path traversal

    A vulnerability was found in chshcms mccms 2.7. It has been declared as critical. This vulnerability affects the function restore_del of the file /sys/apps/controllers/admin/Backups.php. The manipulation of the argument dirs leads to path traversal. The attac…

  • Medium 6.3

    chshcms mccms Gf.php index server-side request forgery

    A vulnerability was found in chshcms mccms 2.7. It has been classified as critical. This affects the function index of the file sys/apps/controllers/api/Gf.php. The manipulation of the argument pic leads to server-side request forgery. It is possible to initi…