CVE-2023-49031: Oneadvanced Tikit Emarketing

Medium severity, CVSS 5.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint.

Affected products

Published 2025-03-03. Last modified 2026-06-17.