CVE-2018-12065

Description

A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files (execute PHP code) or read non-PHP files by replacing a helper.json file.

References

https://xkklq.coding.me/2018/06/07/wityCMS-LFI/

https://github.com/Creatiwity/wityCMS/issues/152

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS