Record summary

CVE-2010-4798 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.

Description

Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBOrangeHRM 2.6.0.1 - Local File InclusionExploitDB exploitby ZonTaNot analyzed1 file
ExploitDB

PoC details

References

4