Vulnerabilities (CVE)

Filtered by vendor Vanillaforums Subscribe
Filtered by product Vanilla
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-9889 1 Vanillaforums 1 Vanilla 2019-03-26 4.0 MEDIUM 2.7 LOW
In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server.