CVE-2024-57170

creationtimestamp| type| source ---|---|--- 2025-03-18 17:44:09+00:00| seen| https://t.me/cvedetector/20574 2025-03-18 20:18:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihyyia62l...

CVE-2024-57170

SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichiertodelete" parameter allows authenticated attackers to specify file paths containing directory traversal sequences e.g., ../. This vulnerability enables attackers to delete arbitrary files outside t...

CVE-2024-57170

SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichiertodelete" parameter allows authenticated attackers to specify file paths containing directory traversal sequences e.g., ../. This vulnerability enables attackers to delete arbitrary files outside t...

CVE-2024-57170

SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichiertodelete" parameter allows authenticated attackers to specify file paths containing directory traversal sequences e.g., ../. This vulnerability enables attackers to delete arbitrary files outside t...

CVE-2024-57170

SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichiertodelete" parameter allows authenticated attackers to specify file paths containing directory traversal sequences e.g., ../. This vulnerability enables attackers to delete arbitrary files outside t...

CVE-2024-57170

SOPlanning version 1.53.00 is vulnerable to a directory traversal issue within the /process/upload.php API endpoint. The vulnerability exists because the fichier_to_delete parameter does not properly sanitize input, allowing authenticated attackers to use directory traversal sequences (e.g., ../ ...