| Package | Affected versions | Patched versions |
|---|---|---|
| phptransformer | = 2016.9 |
phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter. Attackers can send requests to the jQueryFileUploadmaster server endpoint with traversal sequences ../../../../../../ to list and retrieve files outside the intended directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free