CVE-2023-3240

A vulnerability has been found in OTCMS up to 6.62 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file usersNews_deal.php. The manipulation of the argument file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231511.

• CWE-24

• https://github.com/HuBenLab/HuBenVulList/blob/main/OTCMS%20was%20discovered%20to%20contain%20an%20arbitrary%20file%20download%20vulenrability%20via%20the%20filename.mdExploit
• https://vuldb.com/?ctiid.231511Permissions Required, Third Party Advisory
• https://vuldb.com/?id.231511Third Party Advisory
• https://github.com/HuBenLab/HuBenVulList/blob/main/OTCMS%20was%20discovered%20to%20contain%20an%20arbitrary%20file%20download%20vulenrability%20via%20the%20filename.mdExploit
• https://vuldb.com/?ctiid.231511Permissions Required, Third Party Advisory
• https://vuldb.com/?id.231511Third Party Advisory

Published

Jun 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32394The issue was addressed with improved checks. This issue is …2.4
• CVE-2023-32395A logic issue was addressed with improved state management. …5.5
• CVE-2023-32396This issue was addressed with improved checks. This issue is…7.8
• CVE-2023-32397A logic issue was addressed with improved state management. …7.5
• CVE-2023-32398A use-after-free issue was addressed with improved memory ma…7.8
• CVE-2023-32399The issue was addressed with improved handling of caches. Th…5.5
• CVE-2023-32400This issue was addressed with improved checks. This issue is…5.5
• CVE-2023-32401A buffer overflow was addressed with improved bounds checkin…7.8
• CVE-2023-32402An out-of-bounds read was addressed with improved input vali…6.5
• CVE-2023-32403This issue was addressed with improved redaction of sensiti…5.5
• CVE-2023-32404This issue was addressed with improved entitlements. This is…5.5
• CVE-2023-32405A logic issue was addressed with improved checks. This issue…7.8