Directory traversal

2018-04-1609:58:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON

QingDao Nature Easy Soft Chanzhi Enterprise Portal System (aka chanzhieps) pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php.

CPENameOperatorVersion
chanzhieq1.6.0-pro

CPE	Name	Operator	Version
	chanzhi	eq	1.6.0-pro

References

github.com/goodrain-apps/chanzhieps/issues/1