CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebGeniusLab Seofy Core seofy-core allows PHP Local File Inclusion.This issue affects Seofy Core: from n/a through <= 1.6.8.
Explanation of Vulnerability in Simple Terms
Seofy Core versions up to 1.6.8 contain a path traversal vulnerability that allows an attacker to read or write arbitrary files on the server. The vulnerability requires specific conditions to exploit but can result in full compromise of confidentiality, integrity, and availability. Users should update to a version newer than 1.6.8 immediately.
What an attacker can do
Read or write arbitrary files on the server, potentially exposing sensitive data or injecting malicious code.
Potential impact on your site
An attacker could steal configuration files, database credentials, or inject code to take control of your site.
Conditions required to exploit
Network access to the vulnerable application; no authentication required, but exploitation requires specific technical conditions.
Key dates
External resources
