Description
Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter to install/index.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin A Page Flip Book 'pageflipbook_language' Parameter Local File Include (2.3)
WordPress Plugin Spider Calendar Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.1)
MediaWiki Missing Authorization Vulnerability (CVE-2021-30155)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2017-7525)
WordPress Plugin SCORM Cloud For WordPress 'ajax.php' SQL Injection (1.0.6.6)