Описание
Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/.
Ссылки
- Vendor Advisory
- Exploit
- Exploit
- Vendor Advisory
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1Версия до 2.6 (включая)
cpe:2.3:a:elinestudio:site_composer:*:*:*:*:*:*:*:*
EPSS
Процентиль: 93%
0.11313
Средний
7.5 High
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
почти 4 года назад
Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/.
EPSS
Процентиль: 93%
0.11313
Средний
7.5 High
CVSS2
Дефекты
CWE-22