CVE-2018-12604: Njtech Greencms

High severity, CVSS 7.5. EPSS: 13.2% chance of exploitation in the next 30 days.

GreenCMS 2.3.0603 allows remote attackers to obtain sensitive information via a direct request for Data/Log/year_month_day.log.

Affected products

• Njtech Greencms: version 2.3.0603 only

Published 2018-06-20. Last modified 2026-06-17.