Cltphp

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Cltphp records in CISA KEV

No Cltphp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cltphp 7 records MEDIUM

Records

7 records in Cltphp · all components

TI-2023-14203 CVE-2023-30268 · GHSA-9hg4-v4mm-7p8r

CLTPHP <=6.0 is vulnerable to Improper Input Validation.

MEDIUM 50

CLTPHP <=6.0 is vulnerable to Improper Input Validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00841 Published 2023-05-04 No fix listed CWE-22

TI-2023-14199 CVE-2023-30264 · GHSA-m6qg-5wwx-278p

CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via…

MEDIUM 50

CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-05-04 No fix listed CWE-434

TI-2023-14201 CVE-2023-30266 · GHSA-9f8x-g6vv-jwjg

CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.

MEDIUM 42

CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00827 Published 2023-04-26 No fix listed CWE-434

TI-2023-14204 CVE-2023-30269 · GHSA-prj4-33qx-63g9

CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.

LOW 39

CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00734 Published 2023-04-26 No fix listed CWE-1284

TI-2023-14200 CVE-2023-30265 · GHSA-m9c4-g8c9-pfxc

CLTPHP <=6.0 is vulnerable to Directory Traversal.

LOW 31

CLTPHP <=6.0 is vulnerable to Directory Traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01022 Published 2023-04-26 No fix listed CWE-22

TI-2022-00980 CVE-2022-1085 · GHSA-4mq6-w4hh-c286

CLTPHP POST Parameter cross site scripting

LOW 28

A vulnerability was found in CLTPHP up to 6.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00593 Published 2022-03-29 No fix listed CWE-79

TI-2023-14202 CVE-2023-30267 · GHSA-cvmh-cfjv-9cr7

CLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php.

LOW 27

CLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2023-04-26 No fix listed CWE-79

Open these records in search →

Critical	2
High	2
Medium	3
Low	0
No CVSS	0