Directory traversal

2011-01-2019:00:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.528 Medium

EPSS

Percentile

97.6%

JSON

Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via the system parameter to index.php.

CPENameOperatorVersion
fraiseeq3.0

CPE	Name	Operator	Version
	fraise	eq	3.0

References

osvdb.org/70409

secunia.com/advisories/42835

www.vupen.com/english/advisories/2011/0073

exchange.xforce.ibmcloud.com/vulnerabilities/64736

www.exploit-db.com/exploits/15964