CVE-2017-11469
HighSummary
The get2post.php file in IDERA Uptime Monitor 7.8 has a directory traversal vulnerability in the file_name parameter.
Risk Assessment
An attacker could gain access to system files, potentially leading to the disclosure of sensitive data or system compromise.
Recommendation
It is recommended to update to the latest version of the software and implement input parameter validation to prevent directory traversal attacks.
Other vulnerabilities in IDERA Uptime Monitor 7.8
See all- CVE-2017-11471Critical
IDERA Uptime Monitor version 7.8 has an SQL injection vulnerability in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.
- CVE-2017-11470Critical
IDERA Uptime Monitor version 7.8 has an SQL injection vulnerability in getxenmetrics.php via the element parameter.
Original NVD description (English source)
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.