CVE-2014-8676

Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of…

published August 31, 2017

CVSS
—
EPSS
41%
Percentile
98.6
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in a URL path parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.40779 · 98.6th percentile
Published
2017-08-31T22:00Z
EPSS history
Timeline
  • 22 SEP 03:10Z
    EPSS moved 41% → 28%
    epss
  • 06 SEP 03:08Z
    EPSS moved 41% → 28%
    epss
  • 30 AUG 15:28Z
    EPSS moved 28% → 41%
    epss
  • 29 AUG 03:59Z
    EPSS moved 41% → 28%
    epss
  • 31 AUG 22:00Z
    Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of…
    cvelistv5