Lucene search
Veracode Vulnerability DatabaseVERACODE:3293HistoryJan 16, 2017 - 3:03 a.m.
Directory Traversal
2017-01-1603:03:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
55.7%
b2evolution is vulnerable to directory traversal vulnerability. It allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. (dot dot) in the fm_selected array parameter of inc/files/files.ctrl.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| b2evolution | le | 6.7.9 | |
| b2evolution | le | 6.9.5 | |
| b2evolution | le | 5.1.3 | |
| b2evolution | le | 6.8.3 |
Related
prion
prion
Directory traversal
2017-01-15 22:59:00
Directory traversal
2017-01-23 07:59:00
cvelist
cvelist
CVE-2017-5480
2017-01-15 22:00:00
CVE-2017-5539
2017-01-23 06:49:00
cve
cve
CVE-2017-5480
2017-01-15 22:59:00
CVE-2017-5539
2017-01-23 07:59:00
osv
osv
CVE-2017-5480
2017-01-15 22:59:00
CVE-2017-5539
2017-01-23 07:59:00
nvd
nvd
CVE-2017-5480
2017-01-15 22:59:00
CVE-2017-5539
2017-01-23 07:59:00
openvas
openvas
b2evolution Multiple Vulnerabilities
2017-01-24 00:00:00