| Package | Affected versions | Patched versions |
|---|---|---|
| net.mingsoft:ms-mcms | ≤ 4.6.5 | |
| mcms | = 4.6.5 |
An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free