Security Advisory

CVE-2022-37190

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-13 22:07:14

Last updated 2024-08-03 10:21:33

Assigner mitre

State PUBLISHED

Description

CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/api/index.php.

← Browse all CVEs View on cve.org ↗