A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /template/1/default/. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252698 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/sweatxi/BugHub/blob/main/Nanchang%20Lanzhi%20Technology%20Co.pdf | Exploit |
| https://vuldb.com/?ctiid.252698 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.252698 | Third Party Advisory VDB Entry |
Configurations
History
12 Feb 2024, 17:35
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jspxcms jspxcms
Jspxcms |
|
| References | () https://vuldb.com/?id.252698 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.252698 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | () https://github.com/sweatxi/BugHub/blob/main/Nanchang%20Lanzhi%20Technology%20Co.pdf - Exploit | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:jspxcms:jspxcms:10.2.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
03 Feb 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-03 02:15
Updated : 2024-05-17 02:35
NVD link : CVE-2024-1200
Mitre link : CVE-2024-1200
CVE.ORG link : CVE-2024-1200
JSON object : View
Products Affected
jspxcms
- jspxcms
CWE