CVE-2023-30268

概要

参考情報

• gist.github.com/HuBenLab/16dc2f87f91a6f8c60eefce5abf18c08 · Third Party Advisory

cltphp のその他の脆弱性

• CVE-2023-30264緊急 9.8CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update.
• CVE-2023-30269高 8.1CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.
• CVE-2023-30267中 6.1CLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php.
• CVE-2023-30266高 8.8CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.
• CVE-2023-30265中 6.5CLTPHP <=6.0 is vulnerable to Directory Traversal.