Vendor
Getsurreal
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.2
Surreal ToDo 0.6.1.2 Local File Inclusion via index.php
Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.p…