Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2024-9923

TEAMPLUS TECHNOLOGY Team+ - Arbitrary File Move through Path Traversal

Description

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access them.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

teamplus technology team+

Default version status: unaffected

  • 13.5.*affected

References