CVE-2020-24136 – Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary fi

Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename parameter to wex/html.php.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24136

Reference (s):

• https://github.com/secwx/research/blob/main/cve/CVE-2020-24136.md
• https://github.com/vedees/wcms/issues/12