📦 Classcms

ClassCMS versions up to 4.8 contain a file inclusion vulnerability in the nowView method that allows attackers to include uploaded PHP files and execute arbitrary code. This affects all installations ...

Classcms v2.5 and below contains an arbitrary file upload vulnerability in the classupload component. Attackers can upload crafted .txt files to execute arbitrary code on the server. This affects all ...

This vulnerability in ClassCMS allows attackers to perform vertical privilege escalation through improper privilege handling in the user management component. Attackers can exploit this remotely to ga...