4 matches found
Directory traversal
Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. dot dot in the file name...
CVE-2017-10665
Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. dot dot in the file name...
CVE-2017-10665: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. dot dot in the file name...
PT-2017-11419
Name of the Vulnerable Software and Affected Versions phpGrid versions prior to 7.2.5 Description The issue allows remote attackers to execute arbitrary code by uploading a crafted file with a .. dot dot in the file name, exploiting a directory traversal vulnerability in the ajaxfileupload.php...