CVE-2017-9428

Published: 2017-06-04T23:29Z

Last Modified: 2024-11-21T03:36Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A directory traversal vulnerability exists in core\admin\ajax\developer\extensions\file-browser.php in BigTree CMS through 4.2.18 on Windows, allowing attackers to read arbitrary files via ..\ sequences in the directory parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt