CVE-2017-5480

Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. dot dot in the fmselected array parameter...

CVE-2017-5480: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. dot dot in the fmselected array parameter...

PT-2017-16521

Name of the Vulnerable Software and Affected Versions b2evolution versions prior to 6.8.4 Description A directory traversal issue exists, allowing remote authenticated users to read or delete arbitrary files. This is achieved by providing a .. dot dot in the fm selected array parameter in the...