Description
GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension). This allows creation of PHP files outside of the uploads directory, directly in the webroot.
Remediation
References
Related Vulnerabilities
WebLogic CVE-2019-2398 Vulnerability (CVE-2019-2398)
WebLogic CVE-2019-2650 Vulnerability (CVE-2019-2650)
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1999046)
Resin Application Server Other Vulnerability (CVE-2004-0281)
WordPress Plugin WP-Members Membership Cross-Site Scripting (3.1.4.2)