PT-2019-7555
CVE-2016-10759
·
تاريخ النشر
2019-05-24
·
تاريخ التحديث
2019-05-30
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Precurio version 2.1
Description
The issue in Precurio allows Directory Traversal, which can lead to arbitrary code execution. This is possible because the ExtendedFileManager can be used to rename the .htaccess file, thereby bypassing the restriction on .php uploads.
Recommendations
For Precurio version 2.1, consider restricting access to the ExtendedFileManager or disabling its ability to rename system files like .htaccess until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾