From 48c5f761c5c2fb11d6d30004da581598f1ac5b70 Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Thu, 12 May 2022 10:32:19 -0400 Subject: [PATCH] Enhancement: cnvd/2020/CNVD-2020-68596.yaml by mp --- cnvd/2020/CNVD-2020-68596.yaml | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/cnvd/2020/CNVD-2020-68596.yaml b/cnvd/2020/CNVD-2020-68596.yaml index 8294f8519b..2e602790c3 100644 --- a/cnvd/2020/CNVD-2020-68596.yaml +++ b/cnvd/2020/CNVD-2020-68596.yaml @@ -1,11 +1,17 @@ id: CNVD-2020-68596 info: - name: WeiPHP 5.0 Path Traversal + name: WeiPHP 5.0 - Path Traversal author: pikpikcu - severity: critical + description: WeiPHP 5.0 is susceptible to directory traversal attacks. + severity: high reference: - http://wiki.peiqi.tech/PeiQi_Wiki/CMS%E6%BC%8F%E6%B4%9E/Weiphp/Weiphp5.0%20%E5%89%8D%E5%8F%B0%E6%96%87%E4%BB%B6%E4%BB%BB%E6%84%8F%E8%AF%BB%E5%8F%96%20CNVD-2020-68596.html + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N + cvss-score: 8.6 + cve-id: + cwe-id: CWE-22 tags: weiphp,lfi,cnvd,cnvd2020 requests: @@ -41,3 +47,5 @@ requests: - WeiPHP - DB_PREFIX condition: and + +# Enhanced by mp on 2022/05/12