CVE-2023-30268

Description

References

• gist.github.com/HuBenLab/16dc2f87f91a6f8c60eefce5abf18c08 · Third Party Advisory

cltphp의 다른 취약점

• CVE-2023-30264심각 9.8CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update.
• CVE-2023-30269높음 8.1CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.
• CVE-2023-30267보통 6.1CLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php.
• CVE-2023-30266높음 8.8CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.
• CVE-2023-30265보통 6.5CLTPHP <=6.0 is vulnerable to Directory Traversal.