CVE-2018-19748: Path Traversal

Published Nov 29, 2018

Updated

app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&root= directory traversal. The value of the root parameter must be base64 encoded (note that base64 encoding, instead of URL encoding, is very rare in a directory traversal attack vector).

Affected Software

1 affected component

SDCMS SDCMS=1.6

Event History

Nov 29, 2018

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-19748?

CVE-2018-19748 has been classified as a high severity vulnerability due to its potential for arbitrary file reading.

How do I fix CVE-2018-19748?

To fix CVE-2018-19748, update SDCMS to the latest patched version that addresses this directory traversal vulnerability.

What is the impact of CVE-2018-19748?

The impact of CVE-2018-19748 allows attackers to read arbitrary files from the server, potentially accessing sensitive information.

What software is affected by CVE-2018-19748?

CVE-2018-19748 affects SDCMS version 1.6, where the vulnerability resides in the admin controller handling file attachments.

Can CVE-2018-19748 be exploited remotely?

Yes, CVE-2018-19748 can be exploited remotely if an attacker can access the vulnerable SDCMS instance.