medium6.5Public exploit code
CVE-2021-44665
A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Xerte 3.10.3 - Directory Traversal (Authenticated)2022-03-02 · webapps · php
Impact
A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xerte | Xerte | through 3.10.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/166181/Xerte-3.10.3-Directory-Traversal.html
- https://github.com/thexerteproject/xerteonlinetoolkits/commit/48a9880c6ac38f4d215f9143baf3d6e6062a1871
- http://packetstormsecurity.com/files/166181/Xerte-3.10.3-Directory-Traversal.html
- https://github.com/thexerteproject/xerteonlinetoolkits/commit/48a9880c6ac38f4d215f9143baf3d6e6062a1871