Files
CVEs-PoC/2017/CVE-2017-17793.md
T
2024-06-18 02:51:15 +02:00

765 B

CVE-2017-17793

Description

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename).

POC

Reference

Github

No PoCs found on GitHub currently.