| Package | Affected versions | Patched versions |
|---|---|---|
| php upload tool | = 1.0 |
Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read arbitrary files via (1) ".." sequences or (2) absolute pathnames in the filename parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free