ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/template directory to execute PHP code.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://github.com/J-0k3r/CVE-2024-48180 | Broken Link |
Configurations
History
28 Apr 2025, 17:34
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:classcms:classcms:*:*:*:*:*:*:*:* | |
First Time |
Classcms
Classcms classcms |
|
References | () https://github.com/J-0k3r/CVE-2024-48180 - Broken Link |
16 Oct 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-16 21:15
Updated : 2025-04-28 17:34
NVD link : CVE-2024-48180
Mitre link : CVE-2024-48180
JSON object : View
Products Affected
classcms
- classcms
CWE
No CWE.