Description
DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file'] is filename,and as there is no filter function for security, you can read any file's content.
Unscored
CVE-2020-19890
EUVD-2020-11786GHSA-7r64-4hhr-hq25
DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file'] is filename,and as there is no filter fun…
Published Aug 24, 2020 · Updated Aug 4, 2024 · Assigned by mitre