Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5wg6-v5wg-r8c6

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php.

Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php.

EPSS

Процентиль: 35%
0.00142
Низкий

Дефекты

CWE-22

Связанные уязвимости

nvd
больше 21 года назад

Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php.

debian
больше 21 года назад

Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through ...

EPSS

Процентиль: 35%
0.00142
Низкий

Дефекты

CWE-22