Unscored CVE-2023-39681 EUVD-2023-43382GHSA-pqxg-66p9-rr3w

Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Configuration.php…

Published Sep 5, 2023 · Updated Sep 30, 2024 · Assigned by mitre

Description

Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Configuration.php. This vulnerability is triggered via a crafted payload.

References

https://github.com/yanbochen97/CuppaCMS_RCE