CVE-2022-30062: Ftcms path traversal vulnerability

FFtcms · Ftcms

ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php

6.5 CVSS 3.1 Medium EPSS 1.1% · top 36.2% CWE-22 · Path traversal

6.5CVSS 3.1 base score, v2 4.0

1.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

FFtcms Ftcms

References

Link	Tags
https://www.yuque.com/docs/share/713b23bf-2239-46de-9d1b-88b17d37dec3	ExploitThird Party Advisory
https://www.yuque.com/docs/share/713b23bf-2239-46de-9d1b-88b17d37dec3	ExploitThird Party Advisory

Track CVE-2022-30062 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-30063Ftcms vulnerabilityftcms <=2.1 was discovered to be vulnerable to code execution attacks .EPSS 18%11 May 2022 8.8CVE-2022-37730Ftcms cross-site request forgery vulnerabilityIn ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to c…EPSS 0.40%7 Sep 2022 8.8CVE-2022-30060Ftcms vulnerabilityftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.phpEPSS 1.1%11 May 2022 6.5CVE-2022-30061Ftcms path traversal vulnerabilityftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp.EPSS 1.3%11 May 2022 6.1CVE-2022-37731Ftcms cross-site scripting vulnerabilityftcms 2.1 poster.PHP has a XSS vulnerability. The attacker inserts malicious JavaScript code into the web page, causing the user / administrator to t…EPSS 0.58%7 Sep 2022 5.1CVE-2025-2132Ftcms injection vulnerabilityA vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/index.php/web/ajax_all_lists o…EPSS 0.43%9 Mar 2025 4.8CVE-2025-2133Ftcms cross-site scripting vulnerabilityA vulnerability classified as problematic was found in ftcms 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/index…EPSS 0.31%10 Mar 2025 9.8CVE-2026-93616Checkpoint multi-domain security management path traversal vulnerabilityA directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Managem…KEVEPSS 20%22 Sep 2026

Source: NIST National Vulnerability Database (record CVE-2022-30062), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.