| Package | Affected versions | Patched versions |
|---|---|---|
| constructr-cms | = 3.00.0= 3.00.1= 3.00.2= 3.01.0= 3.01.1= 3.01.2= 3.01.3= 3.01.4= 3.01.5= 3.01.6= 3.01.7= 3.01.8= 3.01.9= 3.02.0= 3.02.1= 3.02.2= 3.02.3= 3.02.4≤ 3.02.5 |
Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the edit_file parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free