N/A
< 2.5
Modular 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Minimum safe version
2.8.3
Update to 2.8.3 or later to address 6 fixable vulnerabilities
Modular 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Modular 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
CVE-2014-9735
CVE-2015-1579
Modular <= 2.4 - Arbitrary File Deletion
Modular <= 2.4 - Arbitrary File Download