Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
CVE-2015-10030: SUKOHI Surpass: Path Traversal Allows File Access
CVE-2015-10030 · published 3 years ago
Summary
A critical flaw in SUKOHI Surpass allows attackers to access unauthorized files on a server. This could lead to sensitive data being compromised. To fix this issue, upgrade to version 1.0.0 or apply the patch identified as d22337d453a2a14194cdb02bf12cdf9d9f827aa7.
What to do
- Update sukohi surpass to version 1.0.0.
- Update surpass_project surpass to version 1.0.0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| composer | sukohi | surpass |
< 1.0.0 Fix: upgrade to 1.0.0
|
| – | surpass_project | surpass |
< 1.0.0 cpe:2.3:a:surpass_project:surpass:*:*:*:*:*:*:*:* |
Original advisory text
A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir...
A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir leads to pathname traversal. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as d22337d453a2a14194cdb02bf12cdf9d9f827aa7. It is recommended to upgrade the affected component. VDB-217642 is the identifier assigned to this vulnerability.
References
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-22Path Traversal
CWE-21DEPRECATED: Pathname Traversal and Equivalence Errors
Timeline
Published8 Jan 2023
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta