CVE-2013-7190

no score yetEPSS 3.8%

iscripts autohoster: no CVSS score yet. EPSS 3.8% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the (1) tmpid parameter to websitebuilder/showtemplateimage.php, (2) fname parameter to admin/downloadfile.php, or (3) id parameter to support/admin/csvdownload.php; or (4) have an unspecified impact via unspecified vectors in support/parser/main_smtp.php.

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2013-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

iscripts:autohoster

References

http://seclists.org/fulldisclosure/2013/Dec/121
https://exchange.xforce.ibmcloud.com/vulnerabilities/89818
http://seclists.org/fulldisclosure/2013/Dec/121
https://exchange.xforce.ibmcloud.com/vulnerabilities/89818

Check your stack JSON