An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/totaljs/cms/issues/49 | Exploit Issue Tracking Vendor Advisory |
| https://medium.com/%400x0d0x0a/cve-2024-48655-server-side-javascript-code-injection-in-total-js-cms-c5fc18359bdc | Exploit Third Party Advisory |
Configurations
History
27 May 2025, 20:44
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:totaljs:total.js:1.0.0:*:*:*:*:node.js:*:* | |
| First Time |
Totaljs total.js
Totaljs |
|
| References | () https://github.com/totaljs/cms/issues/49 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://medium.com/%400x0d0x0a/cve-2024-48655-server-side-javascript-code-injection-in-total-js-cms-c5fc18359bdc - Exploit, Third Party Advisory |
25 Oct 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-25 17:15
Updated : 2025-05-27 20:44
NVD link : CVE-2024-48655
Mitre link : CVE-2024-48655
JSON object : View
Products Affected
totaljs
- total.js
CWE
No CWE.