2 matches found
CVE-2015-3648
Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the defaultlanguage parameter...
7.5CVSS7AI score0.08026EPSS
SaveExploits4References5
CVE-2015-3648: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the defaultlanguage parameter...
7.5CVSS6.3AI score0.08026EPSS
SaveExploits4References2
20