CVE-2018-16457

https://notcve.org/view.php?id=CVE-2018-16457

PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp-content/themes/template_dp_dec2015/img directory. PHP Scripts Mall Open Source Real-estate Script 3.6.2 permite que los atacantes remotos listen el directorio wp-content/themes/template_dp_dec2015/img. • https://googlequeens.com/2018/09/04/cve-2018-16457-open-source-real-estate-script-3-6-2-directory-traversal • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •