| عنوان | givanz Vvveb 1.0.7.3 Path traversal |
|---|
| الوصف | Vvveb CMS version x.x.x.x contains an authenticated arbitrary file disclosure vulnerability in the code editor functionality. An authenticated administrator can read arbitrary files by manipulating the file parameter in the loadFile action. |
|---|
| المصدر | ⚠️ https://github.com/givanz/Vvveb/issues/333 |
|---|
| المستخدم | Huu1j (UID 91525) |
|---|
| ارسال | 11/10/2025 06:15 AM (12 أشهر منذ) |
|---|
| الاعتدال | 25/10/2025 08:27 AM (14 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 329873 [givanz Vvveb حتى 1.0.7.3 Code Editor system/functions.php sanitizeFileName file اجتياز الدليل] |
|---|
| النقاط | 17 |
|---|