CVE-2017-11327

PoC —

CVSS 3.0

6.5 medium

EPSS

<1%p57

Published

Jul 24, 2017 (Jul 24, 2017)

Modified

Jun 17, 2026

Description

An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftp_upload.

Vendors: tilde cms project
Products: tilde cms
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.