Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-42644 1 Cmseasy 1 Cmseasy 2024-11-21 6.5 Medium
cmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the configuration file information of the website such as the database configuration file (config / config_database) can be read through this vulnerability.
CVE-2021-42643 1 Cmseasy 1 Cmseasy 2024-11-21 8.8 High
cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PHP script file is written to the website server, and accessing this file can lead to a code execution vulnerability.