CVE-2017-17793

Published: 2017-12-20T09:29Z

Last Modified: 2024-11-21T03:18Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt