b2evolution directory traversal vulnerability (CNVD-2017-01294)

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. b2evolution suffers from a directory traversal vulnerability that stems from an incomplete fix for the directory traversal vulnerability CVE-2017-5480 patch. An attacker via ... / can bypass...