CVE-2019-9642: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an unauthenticated request, it possible to evaluate malicious PHP code by placing it on the fourth line of a .php file, as demonstrated by a PoC.php created by the guest account, with execution via a...

PT-2019-19770

Name of the Vulnerable Software and Affected Versions Pydio versions through 8.2.2 Description An issue was discovered in Pydio where it is possible to evaluate malicious PHP code through an unauthenticated request. This can be achieved by placing the malicious code on the fourth line of a .php...