Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Hackerqwq

#41329of 53,632
6.5Total CVSS
Vulnerabilities · 1
PT-2022-23911
6.5
2022-09-09
Unknown · Shirne Cms · CVE-2022-37299
**Name of the Vulnerable Software and Affected Versions** Shirne CMS version 1.2.0 **Description** The issue is related to a Path Traversal vulnerability that could cause arbitrary file read. This is possible via the /static/ueditor/php/controller.php endpoint. **Recommendations** For Shirne CMS version 1.2.0, as a temporary workaround, consider restricting access to the /static/ueditor/php/controller.php endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.