Directory traversal

2007-12-0418:46:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.5%

JSON

Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the CFG[site][project_path] parameter.

CPENameOperatorVersion
rayzz_scripteq2.0

CPE	Name	Operator	Version
	rayzz_script	eq	2.0

References

osvdb.org/39694

exchange.xforce.ibmcloud.com/vulnerabilities/38802

www.exploit-db.com/exploits/4685