Security Advisory

CVE-2021-40887

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-10-11 10:12:06

Last updated 2024-08-04 02:51:07

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Projectsend version r1295 is affected by a directory traversal vulnerability. Because of lacking sanitization input for files[] parameter, an attacker can add ../ to move all PHP files or any file on the system that has permissions to /upload/files/ folder.

← Browse all CVEs View on cve.org ↗