cve/2006/CVE-2006-7080.md
2024-06-18 02:51:15 +02:00

649 B

CVE-2006-7080

Description

Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files via ".." sequences in the old_avatar parameter.

POC

Reference

Github

No PoCs found on GitHub currently.