CVE-2018-7171

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot) in the contentbase parameter to rpc/set_all.

• CWE-22

• http://packetstormsecurity.com/files/146938/TwonkyMedia-Server-7.0.11-8.5-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/mechanico/sharingIsCaring/blob/master/twonky.pyThird Party Advisory
• https://www.exploit-db.com/exploits/44350/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/146938/TwonkyMedia-Server-7.0.11-8.5-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/mechanico/sharingIsCaring/blob/master/twonky.pyThird Party Advisory
• https://www.exploit-db.com/exploits/44350/Exploit, Third Party Advisory, VDB Entry

Published

Mar 30, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7162All versions of Node.js 9.x and 10.x are vulnerable and the …7.5
• CVE-2018-7164Node.js versions 9.7.0 and later and 10.x are vulnerable and…7.5
• CVE-2018-7166In all versions of Node.js 10 prior to 10.9.0, an argument p…7.5
• CVE-2018-7167Calling Buffer.fill() or Buffer.alloc() with some parameters…7.5
• CVE-2018-7169An issue was discovered in shadow 4.5. newgidmap (in shadow-…
• CVE-2018-7170ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 all…5.3
• CVE-2018-7172In index.php in WonderCMS before 2.4.1, remote attackers can…
• CVE-2018-7173A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 …
• CVE-2018-7174An issue was discovered in xpdf 4.00. An infinite loop in XR…
• CVE-2018-7175An issue was discovered in xpdf 4.00. A NULL pointer derefer…
• CVE-2018-7176FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads …
• CVE-2018-7177SQL Injection exists in the Saxum Numerology 3.0.4 component…