Vanilla Directory Traversal Vulnerability

Vanilla Forums is a Canadian company Vanilla Forums PHP-based open source forum program . A security vulnerability exists in the 'getSingleIndex' function in Vanilla versions prior to 2.6.4. An attacker can exploit the vulnerability to execute code in the context of a web server with the help of...

CVE-2019-9889

In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of...

PT-2019-19920

Name of the Vulnerable Software and Affected Versions Vanilla versions prior to 2.6.4 Description A flaw exists within the getSingleIndex function of the AddonManager class, resulting in a require call using a crafted type value. This leads to Directory Traversal with File Inclusion, allowing an...