Description
A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CTCMS | Content Management System | 2.1.0, 2.1.1, 2.1.2 | — |
References
- VDB-336488 | CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine vdb-entry
- VDB-336488 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #707106 | ctcms 2.1.2 Command Injection third-party-advisory
- Submit #707107 | ctcms 2.1.2 Command Injection (Duplicate) third-party-advisory
- https://note-hxlab.wetolink.com/share/Ros8ZIeCLQrN related
- https://note-hxlab.wetolink.com/share/U6cnRoRfn09r exploit