| Package | Affected versions | Patched versions |
|---|---|---|
| greencms | ≥ 2.1.0612, ≤ 2.3.0603 |
Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. Attackers can manipulate the theme_name parameter in the themeexporthandle action or supply base64-encoded file paths to the downfile action to retrieve sensitive files outside intended directories.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free