PT-2003-2444 · Bytehoard · Bytehoard

Publicado

2003-12-31

·

Atualizado

2017-07-29

·

CVE-2003-1499

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Bytehoard version 0.7
Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the index.php file. This is achieved by using a .. (dot dot) in the infolder parameter.
Recommendations For Bytehoard version 0.7, consider restricting access to the infolder parameter in the index.php file to prevent directory traversal attacks. As a temporary workaround, restrict access to sensitive files and directories until a patch is available.

Exploit

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2003-1499

Produtos afetados

Bytehoard