critical9.8
CVE-2024-39171
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statemen…
Impact
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpvibe | Phpvibe | from 11.0.3 through 11.0.46 |