CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Navneil Naicer Bootscraper allows PHP Local File Inclusion.This issue affects Bootscraper: from n/a through 2.1.0.
Explanation of Vulnerability in Simple Terms
Bootscraper versions up to 2.1.0 contain a path traversal vulnerability that allows an attacker to read or write arbitrary files on the server. The vulnerability requires the victim to visit a malicious link or interact with a crafted request. An attacker can access sensitive files outside the intended directory, potentially exposing configuration files, credentials, or other sensitive data.
What an attacker can do
Read or write arbitrary files on the server by traversing the directory structure.
Potential impact on your site
Sensitive files (config, credentials, database backups) could be exposed or modified without authorization.
Conditions required to exploit
Victim must click a malicious link or visit an attacker-controlled page; no authentication required.
Key dates
External resources
Related vulnerabilities
