| शीर्षक | givanz Vvveb 1.0.7.3 Path traversal |
|---|
| विवरण | Vvveb CMS version x.x.x.x contains an authenticated arbitrary file disclosure vulnerability in the code editor functionality. An authenticated administrator can read arbitrary files by manipulating the file parameter in the loadFile action. |
|---|
| स्रोत | ⚠️ https://github.com/givanz/Vvveb/issues/333 |
|---|
| उपयोगकर्ता | Huu1j (UID 91525) |
|---|
| सबमिशन | 11/10/2025 06:15 AM (12 महीनों पहले) |
|---|
| संयम | 25/10/2025 08:27 AM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 329873 [givanz Vvveb तक 1.0.7.3 Code Editor system/functions.php sanitizeFileName file निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 17 |
|---|