mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-29 09:41:05 +00:00
19 lines
729 B
Markdown
19 lines
729 B
Markdown
|
### [CVE-2018-20420](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20420)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
In webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the overwrite of an existing .sql file on the target web site by creating a template and then using ../ directory traversal in the TemplateName parameter.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
No PoCs from references.
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/0xUhaw/CVE-Bins
|
||
|
|
- https://github.com/eddietcc/CVEnotes
|
||
|
|
|