cbcvebase.

Energyscripts Simple Download vulnerabilities

1 known vulnerability affecting energyscripts/simple_download.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2010-3456P3MEDIUMCVSS 5.0PoCv1.02010-09-17
CVE-2010-3456 [MEDIUM] CWE-22 CVE-2010-3456: Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows r Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
nvd
Energyscripts Simple Download vulnerabilities | cvebase