PT-2020-7875 · Unknown · Free Reprintables Articlefr

Published 2020-01-15 · Updated 2020-01-16 · CVE-2015-6591

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Free Reprintables ArticleFR versions 3.0.7 and earlier

Description: The issue allows local users to read arbitrary files via the s parameter in the application/templates/amelia/loadjs.php file.

Recommendations: For versions 3.0.7 and earlier, consider restricting access to the loadjs.php file until a patch is available. As a temporary workaround, avoid using the s parameter in the affected file to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2015-6591

Affected Products

Free Reprintables Articlefr

References · 2

• 🔥 http://packetstormsecurity.com/files/134081/articleFR-3.0.7-Arbitrary-File-Read.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-6591 · Security Note