VULNERABILITY INTELLIGENCE

CVE-2024-34193

CVSS score7.5 HIGH

EPSS probability0.62%

CISA KEVNot currently listed

Published2024-05-20

Last modified2026-06-17

Description

smanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting in a path traversal vulnerability that can cause arbitrary file reading.