CVE-2017-17793 | BDVDB-2026-94347 Detail

Description#

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/BlogoText/blogotext/commit/101dc1d37010a1d877d6961ed2f32d089c708e91
https://github.com/BlogoText/blogotext/issues/345

Exploit#

No public exploit known

History#

Version 12017-12-20Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.