CVE-2017-10993

Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka…

published July 21, 2017

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02722 · 85.9th percentile
Published
2017-07-21T06:00Z
EPSS history
Timeline
  • 21 JUL 06:00Z
    Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka…
    cvelistv5