Security Advisory

CVE-2022-37191

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-13 22:07:19

Last updated 2024-08-03 10:21:33

Assigner mitre

State PUBLISHED

Description

The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using [function] parameter value as LFI payload.

← Browse all CVEs View on cve.org ↗