Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-3239

A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQrCode. The manipulation of the argument img leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-231510 is the identifier assigned to this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.0%
CVSS Severity
CVSS v3 Score 3.5
CVSS v2 Score 2.7
Products affected by CVE-2023-3239
  • Otcms » Otcms » Version: 3.20
    cpe:2.3:a:otcms:otcms:3.20
  • Otcms » Otcms » Version: 3.61
    cpe:2.3:a:otcms:otcms:3.61
  • Otcms » Otcms » Version: 3.81
    cpe:2.3:a:otcms:otcms:3.81
  • Otcms » Otcms » Version: 3.85
    cpe:2.3:a:otcms:otcms:3.85
  • Otcms » Otcms » Version: 6.00
    cpe:2.3:a:otcms:otcms:6.00
  • Otcms » Otcms » Version: 6.01
    cpe:2.3:a:otcms:otcms:6.01
  • Otcms » Otcms » Version: 6.10
    cpe:2.3:a:otcms:otcms:6.10
  • Otcms » Otcms » Version: 6.11
    cpe:2.3:a:otcms:otcms:6.11
  • Otcms » Otcms » Version: 6.20
    cpe:2.3:a:otcms:otcms:6.20
  • Otcms » Otcms » Version: 6.21
    cpe:2.3:a:otcms:otcms:6.21
  • Otcms » Otcms » Version: 6.22
    cpe:2.3:a:otcms:otcms:6.22
  • Otcms » Otcms » Version: 6.23
    cpe:2.3:a:otcms:otcms:6.23
  • Otcms » Otcms » Version: 6.25
    cpe:2.3:a:otcms:otcms:6.25
  • Otcms » Otcms » Version: 6.30
    cpe:2.3:a:otcms:otcms:6.30
  • Otcms » Otcms » Version: 6.50
    cpe:2.3:a:otcms:otcms:6.50
  • Otcms » Otcms » Version: 6.60
    cpe:2.3:a:otcms:otcms:6.60
  • Otcms » Otcms » Version: 6.61
    cpe:2.3:a:otcms:otcms:6.61
  • Otcms » Otcms » Version: 6.62
    cpe:2.3:a:otcms:otcms:6.62


Products
Pricing
Contact Us

Shodan ® - All rights reserved