Skip to content
OpenAdvisories
Unscored CVE-2017-2150 EUVD-2017-11333GHSA-96wx-4rm6-74cm

Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially…

Published Apr 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: wpdevelop Product: Booking Calendar

Description

Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captcha_chalange parameter.

Affected products

VendorProductAffectedFixed
wpdevelop Booking Calendar version 7.0 and earlier —

References