PT-2012-3041
CVE-2012-1050
·
تاريخ النشر
2012-02-13
·
تاريخ التحديث
2023-02-08
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mathopd versions 1.4.x through 1.5.x before 1.5p7
Description
A directory traversal issue exists when Mathopd is configured with the * construct for mass virtual hosting, allowing remote attackers to read arbitrary files by sending a crafted Host header.
Recommendations
For versions 1.4.x through 1.5.x before 1.5p7, update to version 1.5p7 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾