CVE-2017-11500 | BDVDB-2026-87953 Detail

Description#

A directory traversal vulnerability exists in MetInfo 5.3.17. A remote attacker can use ..\ to delete any .zip file via the filenames parameter to /admin/system/database/filedown.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://blackwolfsec.cc/2017/07/20/Metinfo-directory-traversal-bypass/

Exploit#

No public exploit known

History#

Version 12017-07-20Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.