TI-2022-03199 CVE-2022-3464 · GHSA-3qf4-wfmh-xq4w
puppyCMS settings.php cross site scripting
Priority LOW 28
A vulnerability classified as problematic has been found in puppyCMS up to 5.1.
5 records
A vulnerability classified as problematic has been found in puppyCMS up to 5.1.
Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php.
Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php.
Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php.
An issue was discovered in puppyCMS 5.1.