Lucene search
Veracode Vulnerability DatabaseVERACODE:4651HistoryJul 25, 2017 - 2:58 a.m.
Directory Traversal
2017-07-2502:58:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
0.003 Low
EPSS
Percentile
70.5%
contao/core-bundle is vulnerable to directory traversal attacks. A logged in, back-end user can include and exclude local PHP files through URL manipulation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| contao/core-bundle | le | 4.4.0 | |
| contao/core | le | 3.5.27 |
References
Related
nvd
nvd
CVE-2017-10993
2017-07-21 06:29:00
osv
osv
Contao Core directory traversal vulnerability
2022-05-13 01:42:03
CVE-2017-10993
2017-07-21 06:29:00
friendsofphp
friendsofphp
github
github
Contao Core directory traversal vulnerability
2022-05-13 01:42:03
cvelist
cvelist
CVE-2017-10993
2017-07-21 06:00:00
contao
contao
PHP file inclusion in the back end
2017-07-12 00:00:00
cve
cve
CVE-2017-10993
2017-07-21 06:29:00
prion
prion
Directory traversal
2017-07-21 06:29:00