Unrated severityNVD Advisory· Published Jul 16, 2014· Updated May 6, 2026
CVE-2014-3777
CVE-2014-3777
Description
Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the xmlin parameter.
Affected products
22cpe:2.3:a:reportico:php_report_designer:*:*:*:*:*:*:*:*+ 21 more
- cpe:2.3:a:reportico:php_report_designer:*:*:*:*:*:*:*:*range: <=3.3
- cpe:2.3:a:reportico:php_report_designer:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.3:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.4:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.4:beta:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.6:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:reportico:php_report_designer:3.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.