ID:12985 - Exploit for Path traversal in NukeViet

Link to public exploit:

Vulnerability description

The vulnerability allows a remote user to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences within S/MIME certificate CN in SMTP settings. A remote administrator can send a specially crafted HTTP request and write arbitrary files on the system.

Remediation