Total vulnerabilities in the database
Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a .. (dot dot) in the (3) repertoire parameter.
| Software | From | Fixed in |
|---|---|---|
| chupix / chupix_cms | 0.2.3 | 0.2.3.x |