OTCMS do wersji 6.62 vulnerabilities
4 known CVE vulnerabilities in OTCMS do wersji 6.62, translated and rated.
- CVE-2023-3241Low
A vulnerability was found in OTCMS up to version 6.62 that allows path traversal through manipulation of the url argument in the file /admin/read.php?mudi=announContent.
- CVE-2023-3239Low
A vulnerability was found in OTCMS up to version 6.62 that allows path traversal via manipulation of the img argument in the admin/readDeal.php?mudi=readQrCode file.
- CVE-2023-3238Medium
A critical vulnerability has been found in OTCMS up to version 6.62, affecting some unknown processing of the file /admin/read.php?mudi=getSignal. Manipulation of the argument signalUrl leads to server-side request forgery.
- CVE-2023-3237Medium
A critical vulnerability was found in OTCMS up to version 6.62, affecting unknown code. Manipulating the username/password argument with the input admin leads to the use of a hard-coded password.