N/A
< 2.5
Method 2.1 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Minimum safe version
2.8.3
Update to 2.8.3 or later to address 6 fixable vulnerabilities
Method 2.1 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Method 2.1 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
CVE-2014-9735
CVE-2015-1579
Method <= 2.1 - Arbitrary File Download
Method <= 2.1 - Arbitrary File Deletion