CVE-2017-14979

Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified…

published October 2, 2017

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, related to Lib/Admin/Action/TplAction.class.php and Lib/Admin/Common/function.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01466 · 73.3th percentile
Published
2017-10-02T17:00Z
EPSS history
Timeline
  • 02 OCT 17:00Z
    Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified…
    cvelistv5