| Max CVSS | 7.1 | Min CVSS | 7.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-4437 | 7.1 |
Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows remote attackers to read arbitrary files via an XML file with a .. (dot dot) in the data element.
|
08-08-2017 - 01:32 | 03-10-2008 - 22:22 |