Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mmqw-m38j-rfmq

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter in an Online_help action.

Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter in an Online_help action.

EPSS

Процентиль: 86%
0.03026
Низкий

Дефекты

CWE-22

Связанные уязвимости

nvd
почти 14 лет назад

Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter in an Online_help action.

EPSS

Процентиль: 86%
0.03026
Низкий

Дефекты

CWE-22