Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this vulnerability exists due to an incomplete fix to CVE-2015-4180.
원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4181
원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4181
댓글 0
| 번호 | 제목 | 글쓴이 | 날짜 | 조회 수 |
|---|---|---|---|---|
| 77 | CVE-2017-0014 | 관리자 | 2017.03.18 | 10 |
| 76 | CVE-2017-0016 | 관리자 | 2017.03.18 | 6 |
| 75 | CVE-2017-0015 | 관리자 | 2017.03.18 | 8 |
| 74 | CVE-2017-0010 | 관리자 | 2017.03.18 | 8 |
| 73 | CVE-2017-0012 | 관리자 | 2017.03.18 | 10 |
| 72 | CVE-2017-0011 | 관리자 | 2017.03.18 | 10 |
| 71 | CVE-2017-0007 | 관리자 | 2017.03.18 | 12 |
| 70 | CVE-2017-0009 | 관리자 | 2017.03.18 | 10 |
| 69 | CVE-2017-0008 | 관리자 | 2017.03.18 | 7 |
| 68 | CVE-2017-0001 | 관리자 | 2017.03.18 | 14 |
| 67 | CVE-2017-0006 | 관리자 | 2017.03.18 | 4 |
| 66 | CVE-2017-0005 | 관리자 | 2017.03.18 | 11 |
| 65 | CVE-2017-6952 | 관리자 | 2017.03.18 | 5 |
| 64 | CVE-2017-6573 (mail-masta) | 관리자 | 2017.03.10 | 10 |
| 63 | CVE-2017-6548 | 관리자 | 2017.03.10 | 11 |