Directory traversal

2017-04-2816:59:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captcha_chalange parameter.

CPENameOperatorVersion
booking_calendarle7.0

CPE	Name	Operator	Version
	booking_calendar	le	7.0

References

jvn.jp/en/jp/JVN18739672/index.html

wpbookingcalendar.com/changelog/