ZNC : Security Vulnerabilities, CVEs, (Directory traversal)
ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.
Max CVSS
5.3
EPSS Score
0.19%
Published
2018-07-15
Updated
2019-03-08
Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request.
Max CVSS
7.5
EPSS Score
1.71%
Published
2009-08-04
Updated
2009-08-12
2 vulnerabilities found