Path Traversal

2017-05-2901:40:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.008 Low

EPSS

Percentile

81.9%

JSON

jokkedk/webgrind is vulnerable to path traversals. By using an absolute file path in the file parameter in index.php, attackers are able read an arbitrary file.

CPENameOperatorVersion
jokkedk/webgrindle1.7.0

CPE	Name	Operator	Version
	jokkedk/webgrind	le	1.7.0

References

code.google.com/p/webgrind/issues/detail?id=66

packetstormsecurity.org/files/110216

www.exploit-db.com/exploits/18523

www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php

code.google.com/archive/p/webgrind/issues/66

exchange.xforce.ibmcloud.com/vulnerabilities/73509

0.008 Low

EPSS

Percentile

81.9%

JSON

Related for VERACODE:4310