6.3
Medium
CVE-2023-1634 A vulnerability was found in OTCMS 6.72
Description
A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224016.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OTCMS | 6.72 | No fix stated |
Other CVEs of OTCMS
The 9 CVEs of OTCMS →
CVE-2023-6772
A vulnerability, which was classified as critical, was found in OTCMS 7.01
4.7
Medium
CVE-2023-3241
A vulnerability was found in OTCMS up to 6.62 and classified as problematic
3.5
Low
CVE-2023-3240
A vulnerability has been found in OTCMS up to 6.62 and classified as problematic
3.5
Low
CVE-2023-3239
A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62
3.5
Low