HexBrain

Internet Bug Bounty · Report #104019

Files extracted from archive may be placed outside of destination directory

Validstatus
5 Aug 2015disclosed

How it was found

https://bugs.php.net/bug.php?id=70019

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original