medium·Product Based Web Vulnerabilities·Updated Oct 31, 2025

Landray EKP - Path Traversal

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

CVECVE-2024-11238

6.9

CVSSmedium

Exploitable remotely over the internet · no authentication required.

Description

A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sys_ui_component/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

EKPby Landray

16.0

landray_ekpby landray

16.0

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

Landray EKP - Path Traversal

Check your infrastructure.Right now.

Check your infrastructure.
Right now.