Description
Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fileget parameter in a profile action to index.php.
Exploits (1)
References (3)
Core 3
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/51360
Exploit exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/18347
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/82585
Scores
EPSS
0.0745
EPSS Percentile
91.8%
Details
CWE
CWE-22
Status
published
Products (10)
pragyan_cms_project/pragyan_cms
2.5.4
pragyan_cms_project/pragyan_cms
2.5.9
pragyan_cms_project/pragyan_cms
2.5.12
pragyan_cms_project/pragyan_cms
2.5.13
pragyan_cms_project/pragyan_cms
2.5.14
pragyan_cms_project/pragyan_cms
2.6.1
pragyan_cms_project/pragyan_cms
2.6.2
pragyan_cms_project/pragyan_cms
2.6.3
pragyan_cms_project/pragyan_cms
2.6.4
pragyan_cms_project/pragyan_cms
< 3.0
Published
Jan 12, 2013
Tracked Since
Feb 18, 2026