The vulnerability in liveSite Version 2019.1 allows an attacker to execute arbitrary code remotely. By creating a campaign with a specific payload, an attacker can view sensitive system information like the contents of '/etc/passwd'.
This vulnerability is in the authentication state and is located in the CMS management panel. There are two vulnerabilities: Vuln One and Vuln Two. Vuln One is in the URI POST /ulicms/admin/index.php?action=languages with parameter name. Vuln Two is in the URI POST /ulicms/admin/index.php?action=pages_edit&page=23 with parameter systemname.
Services By CQR