mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-05 06:10:47 +00:00
642 B
642 B
CVE-2009-3151
Description
Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter.
POC
Reference
Github
No PoCs found on GitHub currently.