PT-2005-1371 · Minis · Minis
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Minis version 0.2.1
Description
A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing a .. (dot dot) in the
month parameter of the minis.php file.Recommendations
For Minis version 0.2.1, consider restricting access to the minis.php file or the
month parameter to prevent exploitation until a fix is available.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Minis