CVE-2017-11500

A directory traversal vulnerability exists in MetInfo 5.3.17

published July 20, 2017

CVSS
—
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

A directory traversal vulnerability exists in MetInfo 5.3.17. A remote attacker can use ..\ to delete any .zip file via the filenames parameter to /admin/system/database/filedown.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01558 · 75.0th percentile
Published
2017-07-20T22:00Z
EPSS history
Timeline
  • 20 JUL 22:00Z
    A directory traversal vulnerability exists in MetInfo 5.3.17
    cvelistv5