CVE-2015-6914

2015-09-1116:00:00

mitre

www.cve.org

vulnerability

sitefactory cms

remote attack

AI Score

6.7

Confidence

Low

EPSS

0.022

Percentile

89.7%

JSON

Absolute path traversal vulnerability in SiteFactory CMS 5.5.9 allows remote attackers to read arbitrary files via a full pathname in the file parameter to assets/download.aspx.

References

packetstormsecurity.com/files/133251/SiteFactory-CMS-5.5.9-Directory-Traversal.html