Описание
Croogo CMS has a path traversal vulnerability
A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter.
Пакеты
Наименование
croogo/croogo
composer
Затронутые версииВерсия исправления
<= 4.0.7
Отсутствует
Связанные уязвимости
CVSS3: 6.5
nvd
около 1 месяца назад
A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter.