CuppaCMS v1.0 - Local File Inclusion

披露于 2022/07/28 · 更新于 2025/10/13

CVSS 评分7.5/ 10.0

EPSS 概率42.4%百分位 97.3%

漏洞描述

Cuppa CMS v1.0 is vulnerable to local file inclusion via the component /templates/default/html/windows/right.php.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 cuppacms 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2022-37191 Cuppa CMS v1.0 - Authenticated Local File Inclusion cuppacms	中危	6.5	75.7%	PoCEXP	2022/09/14
CVE-2022-37190RCE Cuppa CMS v1.0 - Remote Code Execution cuppacms	高危	8.8	86.9%	PoCEXP	2022/09/14
CVE-2022-38296 Cuppa CMS v1.0 - Arbitrary File Upload cuppacms	严重	9.8	87.0%	PoCEXP	2022/09/13
CVE-2022-38295 Cuppa CMS v1.0 - Cross Site Scripting cuppacms	中危	6.1	45.1%	PoCEXP	2022/09/13
CVE-2022-27985 Cuppa CMS v1.0 - SQL injection cuppacms	严重	9.8	12.0%	PoCEXP	2022/04/26
CVE-2022-27984 Cuppa CMS v1.0 - SQL injection cuppacms	严重	9.8	12.0%	PoCEXP	2022/04/26