CVE-2019-16903

Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead...

CVE-2018-16903

CVE-2018-16903 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2018-16903

...

CVE-2019-16903

Platinum UPnP SDK 1.2.0 contains a directory traversal flaw in Core/PltHttpServer.cpp due to checking for /.. instead of ../, enabling path traversal. Affected component: Platinum UPnP SDK 1.2.0 (PltHttpServer). Root cause: incorrect path normalization in the HTTP server. Impact is limited to vul...

CVE-2017-16903

LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, within a template Style add request to index.php...