Description
onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated by ?i=etc/&f=passwd&p=raw_view for the /etc/passwd file.
Unscored
CVE-2018-13123
EUVD-2018-5072GHSA-vhwf-5h9h-9397
onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated b…
Published Jul 3, 2018 · Updated Aug 5, 2024 · Assigned by mitre