Record summary

CVE-2014-3975 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.

Description

Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBAuraCMS 3.0 - Multiple VulnerabilitiesExploitDB exploitby Mustafa ALTINKAYNAKNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB

PoC details

References

5