Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p89g-v452-gjjr

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.

fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.

EPSS

Процентиль: 87%
0.03367
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
больше 17 лет назад

fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.

EPSS

Процентиль: 87%
0.03367
Низкий

Дефекты

CWE-287