CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in mh6webentwicklung PDF-Rechnungsverwaltung pdf-rechnungsverwaltung allows PHP Local File Inclusion.This issue affects PDF-Rechnungsverwaltung: from n/a through <= 0.0.1.
Explanation of Vulnerability in Simple Terms
PDF-Rechnungsverwaltung versions 0.0.1 and earlier contain a path traversal vulnerability that allows an attacker to read or modify arbitrary files on the server. The vulnerability requires the attacker to trick a user into visiting a malicious link. An attacker can access sensitive files, modify site data, or potentially execute code depending on file permissions.
What an attacker can do
Read or modify arbitrary files on the server by crafting a malicious URL.
Potential impact on your site
Attackers can access sensitive files, modify site data, or potentially run code on your server.
Conditions required to exploit
Network access and user interaction required; victim must click a malicious link.
Key dates
External resources
Related vulnerabilities
