exploitDog

CVE-2018-16820

Опубликовано: 18 сент. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests.

Ссылки

http://blog.51cto.com/13770310/2173957
Exploit
Third Party Advisory
https://github.com/monstra-cms/monstra/issues/457
Exploit
Issue Tracking
Third Party Advisory
http://blog.51cto.com/13770310/2173957
Exploit
Third Party Advisory
https://github.com/monstra-cms/monstra/issues/457
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:monstra:monstra:3.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.0039

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-wq24-fwf9-r276

CVSS3: 7.5

github

больше 3 лет назад

admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests.

EPSS

Процентиль: 60%

0.0039

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22