Pc4arb : Security Vulnerabilities, CVEs,
Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) absolute path in the file parameter.
Max CVSS
5.0
EPSS Score
0.78%
Published
2009-06-23
Updated
2017-09-29
code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks via crafted keyword sequences that are removed from a filter in the id parameter in a banner action, as demonstrated via the "UNIunionON" string, which is collapsed into "UNION" by the filter_sql function.
Max CVSS
7.5
EPSS Score
0.27%
Published
2009-05-20
Updated
2017-09-29
2 vulnerabilities found