CVE-2022-25485

High

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php.

mitre·CWE-829·Published 2022-03-15

CVSS

7.8

EPSS

0.08

KEV

Exploits

cve.orgen

114 chars

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php.

NVDen

114 chars

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php.

NVDes

150 chars

Se ha detectado que CuppaCMS versión v1.0, contiene una inclusión de archivo local por medio del parámetro url en el archivo /alerts/alertLightbox.php

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H