vendor:
phpShowtime
by:
Red Security TEAM
7,5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: phpShowtime
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: CentOS
2012
phpShowtime Directory Travel
A directory traversal vulnerability exists in phpShowtime, which allows an attacker to access arbitrary files and directories outside of the web root directory. This is achieved by using a specially crafted URL containing directory traversal characters such as '../' to access files outside of the web root directory.
Mitigation:
Ensure that user input is properly sanitized and validated to prevent directory traversal attacks.
