CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in amarksteadman Podiant podiant allows PHP Local File Inclusion.This issue affects Podiant: from n/a through <= 1.1.
Explanation of Vulnerability in Simple Terms
Podiant versions 1.1 and earlier contain a path traversal vulnerability that allows an attacker to read or modify files on the server outside the intended directory. The vulnerability requires user interaction and high attack complexity, but successful exploitation grants full read and write access to sensitive files, potentially compromising the entire application.
What an attacker can do
Read or modify files outside the intended directory on the server.
Potential impact on your site
Attacker could read configuration files, database credentials, or modify application files to inject malicious code.
Conditions required to exploit
User interaction required (e.g., victim clicks a malicious link); network access; no authentication needed.
Key dates
External resources
Related vulnerabilities
