Directory traversal

2009-01-3018:30:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.026 Low

EPSS

Percentile

90.4%

JSON

Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a … (dot dot) in the filename parameter in a viewEntry action.

CPENameOperatorVersion
pritlogeq0.3
pritlogle0.4
pritlogeq0.2

Name	Operator	Version
pritlog	eq	0.3
pritlog	le	0.4
pritlog	eq	0.2

References

secunia.com/advisories/31915

www.securityfocus.com/bid/31503

exchange.xforce.ibmcloud.com/vulnerabilities/45551

www.exploit-db.com/exploits/6639