High severity7.5NVD Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2018-20628

Description

PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Charity Foundation Script Project/Charity Foundation Script
cpe:2.3:a:charity_foundation_script_project:charity_foundation_script:-:*:*:*:*:*:*:*
PHP Scripts Mall/Charity Donation Scriptllm-fuzzy
Range: 1-3

Patches

Vulnerability mechanics

References

gkaim.com/cve-2018-20628-vikas-chaudhary/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000