CVE-2024-55214

A Local File Inclusion (LFI) vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information by exploiting the file download functionality . The root cause is an improper limitation of a pathname to a restricted directory (Path Traversal), as evidenced by a pr...

CVE-2024-55213

A Directory Traversal vulnerability exists in dhtmlxFileExplorer v.8.4.6 , allowing a remote attacker to obtain sensitive information via the File Listing function. The root cause is an Improper Limitation of a Pathname to a Restricted Directory (CWE-22). Exploitation has been demonstrated; for i...