PT-2019-18602 · Php Scripts Mall · Php Scripts Mall Property Rental

Publicado 2019-03-20 · Atualizado 2021-07-21 · CVE-2019-7429

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Property Rental Software version 2.1.4

Description The issue allows directory traversal via a direct request for a listing of an uploads directory, such as the 'wp-content/uploads/2016/08' directory.

Recommendations For PHP Scripts Mall Property Rental Software version 2.1.4, consider restricting access to the uploads directory to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2019-7429

Produtos afetados

Php Scripts Mall Property Rental

Referências · 3

• 🔥 https://gkaim.com/cve-2019-7429-vikas-chaudhary · Exploit
• https://osv.dev/vulnerability/CVE-2019-7429 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7429 · Nota de Segurança