qdPM 9.2 - Directory Traversal

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI. id: CVE-2023-45855 info: name: qdPM 9.2 - Directory Traversal author: DhiyaneshDk severity: high description: | qdPM 9.2 allows Directory Traversal to list files and directories by navigating to t...

CVE-2023-45855

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI...

CVE-2023-45855

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI...

CVE-2023-45855

Affected software: qdPM 9.2. The CVE describes a directory traversal vulnerability that allows an attacker to list files and directories by accessing the /uploads URI. Root cause / vulnerability class: Improper validation or path handling enabling traversal to reveal server-side files. Impact: Po...