Filtered by vendor Xoops Subscriptions
Filtered by product Uploader Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-7178 1 Xoops 2 Uploader, Xoops 2024-11-21 N/A
Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a downloadfile action to index.php.