Description
Absolute path traversal vulnerability in Quick.CMS, version 6.7, the exploitation of which could allow remote users to bypass the intended restrictions and download any file if it has the appropriate permissions outside of documentroot configured on the server via the aDirFiles%5B0%5D parameter in the admin.php page. This vulnerability allows an attacker to delete files stored on the server due to a lack of proper verification of user-supplied input.
INFO
Published Date :
2024-11-29T13:06:30.404Z
Last Modified :
2024-11-29T13:24:05.020Z
Source :
INCIBE
AFFECTED PRODUCTS
The following products are affected by CVE-2024-11992 vulnerability.
| Vendors | Products |
|---|---|
| Quick.cms |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-11992.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact