CVE-2018-18713

The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an…

published October 27, 2018

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=down_sql&name=../ URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02304 · 83.2th percentile
Published
2018-10-27T22:00Z
EPSS history
Timeline
  • 27 OCT 22:00Z
    The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an…
    cvelistv5