Логотип exploitDog
bind:CVE-2008-7055
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2008-7055

Количество 2

Количество 2

nvd логотип

CVE-2008-7055

больше 16 лет назад

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.

CVSS2: 5.1
EPSS: Низкий
github логотип

GHSA-x93g-j874-2hqr

больше 3 лет назад

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2008-7055

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.

CVSS2: 5.1
1%
Низкий
больше 16 лет назад
github логотип
GHSA-x93g-j874-2hqr

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.

1%
Низкий
больше 3 лет назад

Уязвимостей на страницу