2 matches found
Directory traversal
Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php/admin/translationManager...
8.5CVSS7.1AI score0.05791EPSS
SaveExploits5References4Affected Software1
CVE-2013-5692: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php/admin/translationManager...
8.5CVSS6.2AI score0.05791EPSS
SaveExploits5References2
20