RULE(RULE ID:333623)

Rule General Information
Release Date: 2021-06-03
Rule Name: Kpcms Information Disclosure Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Kuaipai CMS is an open source and free PHP enterprise website production, construction, development and optimization SEO management system. The system whose CMS version is less than 1.2 has an information disclosure vulnerability. Fast row CMS enables logging by default, Because the log name is time as the file name, it can cause the administrator’s cookie to be leaked.
Impact: An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information.
Affected OS: Windows, Linux, Others
Reference:
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://gitee.com/qingzhanwang/kpcms