Vulnerabilities > CVE-2022-23316 - Files or Directories Accessible to External Parties vulnerability in Taogogo Taocms 3.0.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |