Path Traversal Vulnerability in GD Rating System Allows PHP Local File Inclusion

CVE-2024-38709

5.3MEDIUM

Key Information

Vendor: Milan Petrovic
Status: Gd Rating System
Vendor: CVE Published:; 12 July 2024

Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6.

Affected Version(s)

GD Rating System <= 3.6

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jul 12, 2024
Vulnerability Reserved.
Jun 19, 2024

Collectors

NVD DatabaseMitre Database

Credit

João Pedro Soares de Alcântara - Kinorth (Patchstack Alliance)