N/A
< 2.5
Echelon 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Minimum safe version
2.8.3
Update to 2.8.3 or later to address 7 fixable vulnerabilities
Echelon 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Echelon - media-upload.php Remote File Upload
Echelon 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
CVE-2014-9735
CVE-2015-1579
Echelon <= 2.4 - Arbitrary File Deletion
Echelon <= 2.4 - Arbitrary File Download
Echelon (All Versions) - Arbitrary File Upload