Описание
Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. (dot dot) sequences in the help_file parameter.
Ссылки
- Vendor Advisory
- Exploit
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:x7_group:x7_chat:1.3.2b:*:*:*:*:*:*:*
cpe:2.3:a:x7_group:x7_chat:1.3.3b:*:*:*:*:*:*:*
cpe:2.3:a:x7_group:x7_chat:1.3.4b:*:*:*:*:*:*:*
cpe:2.3:a:x7_group:x7_chat:1.3.5b:*:*:*:*:*:*:*
cpe:2.3:a:x7_group:x7_chat:1.3.6:*:*:*:*:*:*:*
cpe:2.3:a:x7_group:x7_chat:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.13669
Средний
6.4 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. (dot dot) sequences in the help_file parameter.
EPSS
Процентиль: 94%
0.13669
Средний
6.4 Medium
CVSS2
Дефекты
NVD-CWE-Other