Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories using the Maintain Images file listing, via .. (dot dot) sequences.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ezcontents | Visualshapers | * | 1.41 (including) |