CVEs-PoC/2018/CVE-2018-18950.md

CVE-2018-18950

Description

KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication.

POC

Reference

No PoCs from references.

Github

• https://github.com/0xUhaw/CVE-Bins
• https://github.com/ARPSyndicate/cvemon
• https://github.com/HaleBera/A-NOVEL-CONTAINER-ATTACKS-DATASET-FOR-INTRUSION-DETECTION-Deployments
• https://github.com/eddietcc/CVEnotes