WidzialniCMS vulnerabilities

WidzialniCMS is vulnerable to brute force protection bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and login_timeout cookies, allowing an unauthenticated attacker unlimited login attempts. The issue is fixed in version 2.5.

WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare a URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g. session cookie theft. This issue has been fixed in version 2.5.

WidzialniCMS is vulnerable to unrestricted file upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the uploadPath parameter, an unauthenticated attacker can upload arbitrary files to any location on the server, leading to remote code execution.

WidzialniCMS is vulnerable to unrestricted file upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an unauthenticated attacker can upload arbitrary files to any location on the server, leading to remote code execution.