Descrição
A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This affects the function readfile of the file /download.php. The manipulation of the argument File results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVSS 5.3EPSS 0.44%Risco 0.55
Ver fonte- Publicação
- 2026-04-27 15:16:21
- Versões afetadas
- ==1.0
- Tipo
- Installed app
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N