References https://nvd.nist.gov/vuln/detail/CVE-2022-34121 https://github.com/CuppaCMS/CuppaCMS/issues/18 https://pentest-tools.com/vulnerabilities-exploits/cuppacms-v10-local-file-inclusion_2066 https://cvefeed.io/vuln/detail/CVE-2022-34121#! https://vuldb.com/vuln/205206 https://avd.aliyun.com/product?prod=cuppacms&page=-11 https://github.com/advisories/GHSA-4pqq-wq2g-6rcm https://attackerkb.com/topics/UiV7u2NeEA/cve-2022-34121 https://vulners.com/openvas/OPENVAS:1361412562310803805
Related VulnerabilitiesPoCCVE-2022-24264: Cuppa CMS v1.0 - SQL injectionPoCCVE-2022-24265: Cuppa CMS v1.0 - SQL injectionPoCCVE-2022-24266: Cuppa CMS v1.0 - SQL injectionPoCCVE-2022-25485: Cuppa CMS v1.0 - Local File InclusionPoCCVE-2022-25486: Cuppa CMS v1.0 - Local File InclusionPoCCVE-2022-25497: Cuppa CMS v1.0 - Local File InclusionPoCCVE-2022-27984: Cuppa CMS v1.0 - SQL injectionPoCCVE-2022-27985: Cuppa CMS v1.0 - SQL injectionPoCCVE-2022-34121: CuppaCMS v1.0 - Local File InclusionPoCCVE-2022-37190: Cuppa CMS v1.0 - Remote Code ExecutionPoCCVE-2022-37191: Cuppa CMS v1.0 - Authenticated Local File InclusionPoCCVE-2022-38295: Cuppa CMS v1.0 - Cross Site ScriptingPoCCVE-2022-38296: Cuppa CMS v1.0 - Arbitrary File Upload