Directory traversal

2014-07-1614:19:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.8%

JSON

Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a … (dot dot) in the xmlin parameter.

CPENameOperatorVersion
php_report_designereq2.6
php_report_designereq2.7
php_report_designereq2.5
php_report_designereq1.0.2
php_report_designereq2.3
php_report_designereq1.0.3
php_report_designereq1.0.5
php_report_designereq2.0
php_report_designereq2.2
php_report_designereq2.0.1

Name	Operator	Version
php_report_designer	eq	2.6
php_report_designer	eq	2.7
php_report_designer	eq	2.5
php_report_designer	eq	1.0.2
php_report_designer	eq	2.3
php_report_designer	eq	1.0.3
php_report_designer	eq	1.0.5
php_report_designer	eq	2.0
php_report_designer	eq	2.2
php_report_designer	eq	2.0.1