PT-2025-27375 · Code Projects · Code-Projects Simple Forum
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
code-projects Simple Forum version 1.0
Description:
A critical issue has been discovered, affecting the /forum downloadfile.php file. The manipulation of the
filename argument leads to path traversal. This issue can be initiated remotely.Recommendations:
For code-projects Simple Forum version 1.0, consider restricting access to the /forum downloadfile.php file until a fix is available. As a temporary workaround, avoid using the
filename argument in the affected file to minimize the risk of exploitation.Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Code-Projects Simple Forum