| 제목 | givanz Vvveb 1.0.7.3 Path traversal |
|---|
| 설명 | Vvveb CMS version x.x.x.x contains an authenticated arbitrary file disclosure vulnerability in the code editor functionality. An authenticated administrator can read arbitrary files by manipulating the file parameter in the loadFile action. |
|---|
| 원천 | ⚠️ https://github.com/givanz/Vvveb/issues/333 |
|---|
| 사용자 | Huu1j (UID 91525) |
|---|
| 제출 | 2025. 10. 11. AM 06:15 (12 개월 ago) |
|---|
| 모더레이션 | 2025. 10. 25. AM 08:27 (14 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 329873 [givanz Vvveb 까지 1.0.7.3 Code Editor system/functions.php sanitizeFileName file 디렉토리 순회] |
|---|
| 포인트들 | 17 |
|---|