| Package | Affected versions | Patched versions |
|---|---|---|
| cosmoshop | = 8.10.78≤ 8.11.106 |
Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free