Lucene search

K
cvelistLarry_cashdollarCVELIST:CVE-2018-9205
HistoryApr 04, 2018 - 3:00 p.m.

CVE-2018-9205

2018-04-0415:00:00
larry_cashdollar
www.cve.org
1

0.022 Low

EPSS

Percentile

89.4%

Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn’t verify users or sanitize the file path.

CNA Affected

[
  {
    "product": "avatar_uploader",
    "vendor": "Robbin Zhao",
    "versions": [
      {
        "lessThan": "7.x-1.0-beta8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

0.022 Low

EPSS

Percentile

89.4%