Description

Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk.

Remediation

References

CVE-2020-5744

Related Vulnerabilities

Apache Tomcat Resource Management Errors Vulnerability (CVE-2014-0230)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2851)

PHP Use of Externally-Controlled Format String Vulnerability (CVE-2006-0200)

WordPress Plugin WP Fastest Cache Multiple Vulnerabilities (0.9.4)

WordPress Plugin Contact Form 7 Style Cross-Site Request Forgery (3.2)

Severity

Medium

Classification

CVE-2020-5744 CWE-22 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities