Описание
EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions. Attackers can send GET requests with encoded directory traversal sequences like /..%5c..%5c to read system files such as /windows/win.ini.
Ссылки
- Product
- Exploit
- Third Party AdvisoryExploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:easyphp:webserver:14.1:*:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00236
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 6.5
github
около 2 месяцев назад
EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions. Attackers can send GET requests with encoded directory traversal sequences like /..%5c..%5c to read system files such as /windows/win.ini.
EPSS
Процентиль: 46%
0.00236
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-22