Lei Feng TV CMS 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URI
Reporter | Title | Published | Views | Family All 4 |
---|---|---|---|---|
![]() | CVE-2018-20604 | 30 Dec 201821:29 | – | nvd |
![]() | CVE-2018-20604 | 30 Dec 201821:00 | – | cvelist |
![]() | Directory traversal | 30 Dec 201821:29 | – | prion |
![]() | CVE-2018-20604 | 22 May 202507:04 | – | redhatcve |
Source | Link |
---|---|
github | www.github.com/AvaterXXX/CVEs/blob/master/lfdycms.md |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
s | query param | /admin.php | Directory Traversal vulnerability allows attackers to access files outside the intended directory structure. | CWE-22 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo