Xscan
1 CVEs
product
Monthly
Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users to rename arbitrary files, and consequently obtain sensitive information or. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Path Traversal
Denial Of Service
PHP
Xscan
NVD
Exploit-DB
CVSS 2.0
6.5
EPSS
4.8%
EPSS 5%
CVSS 6.5
MEDIUM
POC
This Month
Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users to rename arbitrary files, and consequently obtain sensitive information or. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Path Traversal
Denial Of Service
PHP
+1
NVD
Exploit-DB