Vulnerability Details CVE-2023-3240
A vulnerability has been found in OTCMS up to 6.62 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file usersNews_deal.php. The manipulation of the argument file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231511.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.0%
CVSS Severity
CVSS v3 Score 3.5
CVSS v2 Score 2.7
Products affected by CVE-2023-3240
-
cpe:2.3:a:otcms:otcms:3.20
-
cpe:2.3:a:otcms:otcms:3.61
-
cpe:2.3:a:otcms:otcms:3.81
-
cpe:2.3:a:otcms:otcms:3.85
-
cpe:2.3:a:otcms:otcms:6.00
-
cpe:2.3:a:otcms:otcms:6.01
-
cpe:2.3:a:otcms:otcms:6.10
-
cpe:2.3:a:otcms:otcms:6.11
-
cpe:2.3:a:otcms:otcms:6.20
-
cpe:2.3:a:otcms:otcms:6.21
-
cpe:2.3:a:otcms:otcms:6.22
-
cpe:2.3:a:otcms:otcms:6.23
-
cpe:2.3:a:otcms:otcms:6.25
-
cpe:2.3:a:otcms:otcms:6.30
-
cpe:2.3:a:otcms:otcms:6.50
-
cpe:2.3:a:otcms:otcms:6.60
-
cpe:2.3:a:otcms:otcms:6.61
-
cpe:2.3:a:otcms:otcms:6.62