Security Advisory

CVE-2017-9428

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-06-04 14:00:00

Last updated 2024-08-05 17:02:44

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A directory traversal vulnerability exists in core\admin\ajax\developer\extensions\file-browser.php in BigTree CMS through 4.2.18 on Windows, allowing attackers to read arbitrary files via ..\ sequences in the directory parameter.

← Browse all CVEs View on cve.org ↗