Beveiligingsadvies
CVE-2019-25579
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter. Attackers can send requests to the jQueryFileUploadmaster server endpoint with traversal sequences ../../../../../../ to list and retrieve files outside the intended directory.