| Package | Affected versions | Patched versions |
|---|---|---|
| precurio | = 2.1 |
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free