B2evolution » B2evolution : Security Vulnerabilities, CVEs, Published In 2007 (Directory traversal) CVSS score >= 6
Directory traversal vulnerability in blogs/index.php in b2evolution 1.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the core_subdir parameter.
Max CVSS
7.5
EPSS Score
0.75%
Published
2007-05-15
Updated
2018-10-16
1 vulnerabilities found