Path Traversal Vulnerability in GD Rating System Allows PHP Local File Inclusion
CVE-2024-38709
5.3MEDIUM
Key Information
- Vendor
- Milan Petrovic
- Status
- Gd Rating System
- Vendor
- CVE Published:
- 12 July 2024
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6.
Affected Version(s)
GD Rating System <= 3.6
Refferences
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database
Credit
João Pedro Soares de Alcântara - Kinorth (Patchstack Alliance)