| Package | Affected versions | Patched versions |
|---|---|---|
| phpkb | = 9.0 |
Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a dot-dot-slash sequence (../) via the POST parameter imgName (for the new name) and imgUrl (for the current file to be renamed).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free