Directory traversal

2008-04-3001:07:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.2%

JSON

Directory traversal vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the operation parameter to the default URI under install/.

CPENameOperatorVersion
chicomaseq2.0.4

CPE	Name	Operator	Version
	chicomas	eq	2.0.4

References

securityreason.com/securityalert/3837

www.securityfocus.com/archive/1/491369/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/42144