Vulnerabilities

TI-2023-14203 CVE-2023-30268 · GHSA-9hg4-v4mm-7p8r

CLTPHP <=6.0 is vulnerable to Improper Input Validation.

MEDIUM 50

CLTPHP <=6.0 is vulnerable to Improper Input Validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00841 Published 2023-05-04 No fix listed CWE-22

TI-2023-14199 CVE-2023-30264 · GHSA-m6qg-5wwx-278p

MEDIUM 50

CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-05-04 No fix listed CWE-434

TI-2023-14204 CVE-2023-30269 · GHSA-prj4-33qx-63g9

LOW 39

CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00734 Published 2023-04-26 No fix listed CWE-1284

TI-2023-14202 CVE-2023-30267 · GHSA-cvmh-cfjv-9cr7

LOW 27

CLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2023-04-26 No fix listed CWE-79

TI-2023-14201 CVE-2023-30266 · GHSA-9f8x-g6vv-jwjg

MEDIUM 42

CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00827 Published 2023-04-26 No fix listed CWE-434

TI-2023-14200 CVE-2023-30265 · GHSA-m9c4-g8c9-pfxc

LOW 31

CLTPHP <=6.0 is vulnerable to Directory Traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01022 Published 2023-04-26 No fix listed CWE-22

TI-2022-00980 CVE-2022-1085 · GHSA-4mq6-w4hh-c286

LOW 28

A vulnerability was found in CLTPHP up to 6.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00593 Published 2022-03-29 No fix listed CWE-79