Directory traversal

2018-12-3021:29:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.6%

JSON

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of …* in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/edit/path/web………*…*1.txt.html URI to read the 1.txt file.

CPENameOperatorVersion
lei_feng_tv_cmseq3.8.6

CPE	Name	Operator	Version
	lei_feng_tv_cms	eq	3.8.6

References

github.com/AvaterXXX/CVEs/blob/master/lfdycms.md