CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Path Traversal.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.2.12.
Explanation of Vulnerability in Simple Terms
Paid Videochat Turnkey Site versions 7.2.12 and earlier contain a path traversal vulnerability that allows an attacker to cause a denial of service by making the site unavailable. The vulnerability requires no authentication or user interaction and can be exploited over the network. The impact extends beyond the vulnerable component itself.
What an attacker can do
Make the site unavailable or unresponsive by exploiting a path traversal flaw.
Potential impact on your site
Your site could become unavailable or unresponsive without warning or user action.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
