Security Advisory

CVE-2017-14979

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-02 17:00:00

Last updated 2024-08-05 19:42:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, related to Lib/Admin/Action/TplAction.class.php and Lib/Admin/Common/function.php.

← Browse all CVEs View on cve.org ↗