地图 / XML Member Proccessing - Local File inclusion Vulnerability

XML Member Proccessing - Local File inclusion Vulnerability

路径遍历 / Unlabeled / #342608

厂商: ExpressionEngine
严重程度: 低危
赏金: —
弱点: Unlabeled
研究员: @0xsp
披露日期: 2018-05-21
资产: —
CVE: —

该报告还没有中文解读。

时间线

2018-04-24报告提交
2018-05-21公开披露

阅读 HackerOne 原文 ↗作者 @0xsp · 版权归作者与 ExpressionEngine 所有

同类报告

Directory Traversal in uftpd 2.6-2.10██████ · —Local files reading from the web using `brave://`Brave Software · 2018-09-25 Directory Traversal + HTTP Paramater Pollution leaking SQL/LDAP credentialsSoleo · —Local files reading using `link[rel="import"]`Brave Software · 2018-09-29 Path traversal leading to limited CSRF on GET requests on two endpointsHackerOne · 2019-04-05 Arbitrary file read from Cloudflare Pages build environmentCloudflare Public Bug Bounty · 2024-02-23