high7.5Public exploit code
CVE-2018-20470
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sahi pro 7.x/8.x - Directory Traversal2019-06-18 · webapps · multiple
Impact
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sahipro | Sahi Pro | through 8.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153330/Sahi-Pro-7.x-8.x-Directory-Traversal.html
- https://barriersec.com/2019/06/cve-2018-20470-sahi-pro/
- http://packetstormsecurity.com/files/153330/Sahi-Pro-7.x-8.x-Directory-Traversal.html
- https://barriersec.com/2019/06/cve-2018-20470-sahi-pro/