CyberRota Analysis
AI-GeneratedMaxSite CMS versions up to 109.6 are vulnerable to a local file inclusion flaw that enables unauthenticated attackers to exploit path traversal sequences, allowing them to execute privileged handler files. This vulnerability can lead to unauthorized access to sensitive functionalities typically restricted to administrators. Organizations using MaxSite CMS should prioritize remediation to prevent potential exploitation and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execute admin-gated handler actions without authentication to access sensitive functionality.