CVE-2018-17838

An issue was discovered in JTBCPHP 3.0.1.6. Arbitrary file read operations are possible via a /console//console/file/manage.php?type=list&path=c:/ substring...

CVE-2018-17838

An issue was discovered in JTBCPHP 3.0.1.6. Arbitrary file read operations are possible via a /console//console/file/manage.php?type=list&path=c:/ substring...

CVE-2018-17838

CVE-2018-17838 affects JTBC(PHP) 3.0.1.6. The vulnerable component allows arbitrary file read via the web path /console/#/console/file/manage.php?type=list&path=c:/, enabling reading of arbitrary server files. All sources consistently describe this vulnerability as an arbitrary file read in JTBC(...