Design/Logic Flaw

2019-03-1105:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.7%

JSON

An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in “inc.php” can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=…/ substring.

CPENameOperatorVersion
jtbc_phpeq3.0.1.8

CPE	Name	Operator	Version
	jtbc_php	eq	3.0.1.8

References

github.com/jetiben/jtbc/issues/9