CVE-2023-39681

Published September 5th, 2023

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Configuration.php. This vulnerability is triggered via a crafted payload.

yanbochen97/CuppaCMS_RCE

An Unauthorized attacker can execute arbitrary php code leading to unauthorized remote code execution

GitHub