إرسال #706220: Smartbit(http://www.smartschool.be/) Smartschool (be.smartschool.mobile) V10.4.4 Path Traversalالمعلومات

عنوانSmartbit(http://www.smartschool.be/) Smartschool (be.smartschool.mobile) V10.4.4 Path Traversal
الوصفThe Smartschool app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts.
المصدر⚠️ https://github.com/Secsys-FDU/AF_CVEs/issues/4
المستخدم
 Lu1u (UID 92433)
ارسال04/12/2025 02:37 PM (5 أشهر منذ)
الاعتدال14/12/2025 07:42 PM (10 days later)
الحالةتمت الموافقة
إدخال VulDB336419 [Smartbit CommV Smartschool App حتى 10.4.4 be.smartschool.mobile.SplashActivity اجتياز الدليل]
النقاط18

Interested in the pricing of exploits?

See the underground prices here!