CVE-2018-6397: joomlacalendars picture calendar – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2018-6397

高危 7.5CVE-2018-6397 · Published 30/01/2018 · updated 17/06/2026

要点

CVE-2018-6397 是影响 picture calendar (joomlacalendars) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：11.9%，高于 96.1% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
picture calendar joomlacalendars	`= 3.1.4`	No fix yet

Description

Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter.

References

exploit-db.com/exploits/43931 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free