Description
A vulnerability was found in GreenCMS up to 2.3. This affects an unknown part of the file /DataController.class.php of the component File Handler. Performing a manipulation of the argument sqlFiles/zipFiles results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products
njtech: greencms
References7
- github.com/ueh1013/VULN/issues/4 ExploitIssue TrackingThird Party Advisory
- github.com/ueh1013/VULN/issues/5 ExploitIssue TrackingThird Party Advisory
- vuldb.com/?ctiid.338572 Permissions RequiredVDB Entry
- vuldb.com/?id.338572 Third Party AdvisoryVDB Entry
- vuldb.com/?submit.721387 Third Party AdvisoryVDB Entry
- vuldb.com/?submit.724836 Third Party AdvisoryVDB Entry
- vuldb.com/?submit.725143 Third Party AdvisoryVDB Entry
Metrics
- CVSS 3.1
-
6.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - CVSS 4.0
-
2.0
LOW
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 1% percentile: 53 · as of 11 November 2026
- CWE
- CWE-22
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.