Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-48180 EUVD-2024-42946GHSA-3p3h-5g54-qmc8

ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/t…

Published Oct 16, 2024 · Updated Oct 17, 2024 · Assigned by mitre

Description

ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code.

References