| Package | Affected versions | Patched versions |
|---|---|---|
| x2crm | = 1.0= 1.0.1= 1.1.0= 1.2.0= 1.2.1= 1.2.2= 1.3= 1.3.1= 2.2= 2.2.1= 2.5= 2.5.2= 2.7= 2.7.1= 2.7.2= 2.8= 2.8.1= 2.9= 2.9.1= 3.0= 3.0.1= 3.0.2= 3.1= 3.1.1= 3.1.2= 3.2= 3.3= 3.3.1= 3.3.2= 3.4≤ 3.4.1 |
Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the file parameter to index.php/admin/translationManager.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free