CVE-2023-35860

Publication date

2024-06-13 00:00:00

Family

mitre

State

PUBLISHED

Description

A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.