Directory Traversal Vulnerability in PHPJabbers Appointment Scheduler by PHPJabbers
CVE-2014-10010

Currently unrated

Key Information:

Vendor: PHPjabbers
Status: Appointment Scheduler
Vendor: CVE Published:; 13 January 2015

What is CVE-2014-10010?

A directory traversal vulnerability exists in PHPJabbers Appointment Scheduler 2.0, allowing remote attackers to exploit the system by manipulating the 'id' parameter through the pjActionDownload action. By using directory traversal sequences (..), attackers can access arbitrary files on the server. This can lead to unauthorized file reading, potentially exposing sensitive data or configuration files. Proper input validation is essential to mitigate such vulnerabilities and protect application integrity.