Description
The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=down_sql&name=../ URI.
Unscored
CVE-2018-18713
EUVD-2018-10429GHSA-6fm6-9mv4-9wgf
The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directo…
Published Oct 27, 2018 · Updated Aug 5, 2024 · Assigned by mitre