CVE-2025-67170

概要

参考情報

• handylulu/RiteCMS · Product
• mbiesiad/vulnerability-research · Exploit

ritecms のその他の脆弱性

• CVE-2025-67174高 7.5A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal …
• CVE-2025-67173中 6.8A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via…
• CVE-2025-67171高 7.5Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
• CVE-2025-67168中 5.3RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
• CVE-2025-67172高 7.2RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.