CVE-2014-5115

Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary files via a full pathname in the phpfile parameter to index.php

published July 29, 2014

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary files via a full pathname in the phpfile parameter to index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06260 · 93.5th percentile
Published
2014-07-29T14:00Z
EPSS history
Timeline
  • 29 JUL 14:00Z
    Absolute path traversal vulnerability in DirPHP 1.0 allows remote attackers to read arbitrary files via a full pathname in the phpfile parameter to index.php
    cvelistv5