2 matches found
Directory traversal
CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggettodocumenti/../.././inc/config.php one can take the control of the application because credentials are present in that config.php file...
7.5CVSS9.1AI score0.0163EPSS
SaveExploits1References1Affected Software1
CVE-2018-14957: Improper Limitation of a Pathname to a Restricted Directory
CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggettodocumenti/../.././inc/config.php one can take the control of the application because credentials are present in that config.php file...
9.8CVSS8.2AI score0.0163EPSS
SaveExploits1References2
20