PT-2019-7555

CVE-2016-10759

·

Published

2019-05-24

·

Updated

2019-05-30

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Precurio version 2.1
Description The issue in Precurio allows Directory Traversal, which can lead to arbitrary code execution. This is possible because the ExtendedFileManager can be used to rename the .htaccess file, thereby bypassing the restriction on .php uploads.
Recommendations For Precurio version 2.1, consider restricting access to the ExtendedFileManager or disabling its ability to rename system files like .htaccess until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2016-10759
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com