XenForo 2.2.13 ArchiveImport.php Zip Slip | allinfosecnews.com

Jan. 31, 2024, 4:55 p.m. |

Packet Storm packetstormsecurity.com

XenForo versions 2.2.13 and below suffer from a zip slip filename traversal vulnerability in ArchiveImport.php.

filename php vulnerability zip

More from packetstormsecurity.com / Packet Storm

RansomLord Anti-Ransomware Exploit Tool 3.1 1 day, 13 hours ago | packetstormsecurity.com

anti-ransomware compromise concept dll +13

Red Hat Security Advisory 2024-3527-03 1 day, 14 hours ago | packetstormsecurity.com

advisory buffer buffer overflow customer +16

Red Hat Security Advisory 2024-3513-03 1 day, 14 hours ago | packetstormsecurity.com

advisory code code execution enterprise +8

Red Hat Security Advisory 2024-3501-03 1 day, 14 hours ago | packetstormsecurity.com

advisory denial of service enterprise issues +7

Red Hat Security Advisory 2024-3500-03 1 day, 14 hours ago | packetstormsecurity.com

advisory denial of service enterprise http +10

Red Hat Security Advisory 2024-3497-03 1 day, 14 hours ago | packetstormsecurity.com

advisory buffer buffer overflow buffer overflow vulnerability +10

Packet Storm New Exploits For May, 2024 1 day, 14 hours ago | packetstormsecurity.com

archive exploits may packet +2

Ubuntu Security Notice USN-6804-1 1 day, 14 hours ago | packetstormsecurity.com

attacker buffer buffer overflow cache +16

Ubuntu Security Notice USN-6803-1 1 day, 14 hours ago | packetstormsecurity.com

arbitrary code arbitrary code execution attacker code +16

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

View on infosec-jobs.com

Cyber Security Strategy Consultant

@ Capco | New York City

View on infosec-jobs.com

Cyber Security Senior Consultant

@ Capco | Chicago, IL

View on infosec-jobs.com

Sr. Product Manager

@ MixMode | Remote, US

View on infosec-jobs.com

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

View on infosec-jobs.com

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC

View on infosec-jobs.com