CVE-2018-20628

https://notcve.org/view.php?id=CVE-2018-20628

PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory. PHP Scripts Mall Charity Foundation Script, desde la versión 1 hasta la 3, permite un salto de directorio mediante una petición directa de un listado de directorios de subida, como el directorio wp-content/uploads/2018/12. • https://gkaim.com/cve-2018-20628-vikas-chaudhary • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •