← Database

CVE-2022-23316

MEDIUM CVSS: 4.9 Published: 2022-02-04 Modified: 2026-06-17

Description

An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.

Affected Platforms

Taogogo Taocms

Weakness Type

CWE-552

References