CVE-2025-67173

概要

参考情報

• handylulu/RiteCMS · Product
• mbiesiad/vulnerability-research · Exploit

ritecms のその他の脆弱性

• CVE-2025-67174高 7.5A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal …
• CVE-2025-67171高 7.5Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
• CVE-2025-67170中 6.1A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's…
• CVE-2025-67168中 5.3RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
• CVE-2025-67172高 7.2RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.