Lucene search
PRIOn knowledge basePRION:CVE-2017-10993HistoryJul 21, 2017 - 6:29 a.m.
Directory traversal
2017-07-2106:29:00
PRIOn knowledge base
www.prio-n.com
Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal.
| CPE | Name | Operator | Version |
|---|---|---|---|
| contao_cms | eq | 4.3.8 | |
| contao_cms | eq | 4.2.1 | |
| contao_cms | le | 3.5.27 | |
| contao_cms | eq | 4.3.9 | |
| contao_cms | eq | 4.1.1 | |
| contao_cms | eq | 4.0.0 beta1 | |
| contao_cms | eq | 4.3.0 | |
| contao_cms | eq | 4.0.4 | |
| contao_cms | eq | 4.3.3 | |
| contao_cms | eq | 4.2.0 rc1 |
References
Related
friendsofphp
friendsofphp
github
github
Contao Core directory traversal vulnerability
2022-05-13 01:42:03
cvelist
cvelist
CVE-2017-10993
2017-07-21 06:00:00
veracode
veracode
Directory Traversal
2017-07-25 02:58:12
nvd
nvd
CVE-2017-10993
2017-07-21 06:29:00
osv
osv
Contao Core directory traversal vulnerability
2022-05-13 01:42:03
CVE-2017-10993
2017-07-21 06:29:00
contao
contao
PHP file inclusion in the back end
2017-07-12 00:00:00
cve
cve
CVE-2017-10993
2017-07-21 06:29:00