CVE-2018-17838

An issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file read operations are possible via a /console/#/console/file/manage.php?type=list&path=c:/ substring.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-10-01

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Jtbc Php (Jtbc)

References

• https://github.com/AvaterXXX/JTBC/blob/master/README.md#arbitrary-file-read