Directory Traversal Vulnerability in PHPJabbers Appointment Scheduler by PHPJabbers
CVE-2014-10010

Currently unrated

Key Information:

Vendor

PHPjabbers

Status
Appointment Scheduler
Vendor
CVE Published:
13 January 2015

What is CVE-2014-10010?

A directory traversal vulnerability exists in PHPJabbers Appointment Scheduler 2.0, allowing remote attackers to exploit the system by manipulating the 'id' parameter through the pjActionDownload action. By using directory traversal sequences (..), attackers can access arbitrary files on the server. This can lead to unauthorized file reading, potentially exposing sensitive data or configuration files. Proper input validation is essential to mitigate such vulnerabilities and protect application integrity.

References

http://www.exploit-db.com/exploits/30911
exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/90421
vdb-entryx_refsource_XF
http://packetstormsecurity.com/files/124755
x_refsource_MISC

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2014-10010 : Directory Traversal Vulnerability in PHPJabbers Appointment Scheduler by PHPJabbers