CVE-2018-16549

HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter.

• CWE-22

• https://packetstormsecurity.com/files/149204Exploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/149204Exploit, Third Party Advisory, VDB Entry

Published

Sep 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16541In Artifex Ghostscript before 9.24, attackers able to supply…
• CVE-2018-16542In Artifex Ghostscript before 9.24, attackers able to supply…
• CVE-2018-16543In Artifex Ghostscript before 9.24, gssetresolution and gsge…
• CVE-2018-16545Kaizen Asset Manager (Enterprise Edition) and Training Manag…
• CVE-2018-16546Amcrest networked devices use the same hardcoded SSL private…
• CVE-2018-16548An issue was discovered in ZZIPlib through 0.13.69. There is…
• CVE-2018-1655IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in t…4
• CVE-2018-16550TeamViewer 10.x through 13.x allows remote attackers to bypa…
• CVE-2018-16551LavaLite 5.5 has XSS via a /edit URI, as demonstrated by cli…
• CVE-2018-16552MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, …8.8
• CVE-2018-16553In Jspxcms 9.0.0, a vulnerable URL routing implementation al…
• CVE-2018-16554The ProcessGpsInfo function of the gpsinfo.c file of jhead 3…