PT-2019-10121 · Php Scripts Mall · Php Scripts Mall Consumer Reviews Script
CVE-2018-20626
·
Publicado
2019-03-20
·
Atualizado
2019-03-25
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
PHP Scripts Mall Consumer Reviews Script version 4.0.3
Description:
The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2018/12' directory.
Recommendations:
For PHP Scripts Mall Consumer Reviews Script version 4.0.3, consider restricting access to the uploads directory to minimize the risk of exploitation.
Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Php Scripts Mall Consumer Reviews Script