Directory traversal

CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggettodocumenti/../.././inc/config.php one can take the control of the application because credentials are present in that config.php file...

PT-2018-12833

Name of the Vulnerable Software and Affected Versions CMS ISWEB version 3.5.3 Description The issue allows for directory traversal and local file download. This can be demonstrated through the "moduli/downloadFile.php" endpoint with a file parameter set to oggetto documenti/../.././inc/config.php...

CVE-2018-14957: Improper Limitation of a Pathname to a Restricted Directory

CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggettodocumenti/../.././inc/config.php one can take the control of the application because credentials are present in that config.php file...