CVE-2010-2006 Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in....
MediumCVSS 6.5
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| letodms | <= 1.7.2 | No fix listed |
| letodms | = 1.5.0 | No fix listed |
| letodms | = 1.5.0-b | No fix listed |
| letodms | = 1.5.1 | No fix listed |
| letodms | = 1.6.0-b | No fix listed |
| letodms | = 1.7.0 | No fix listed |
References
- 61834 vdb-entry
- 38237 third-party-advisory vendor-advisory
- 42900 third-party-advisory
- DSA-2146 vendor-advisory
- 20100115 SEC Consult SA-20100115-0 :: Local file inclusion/execution and multiple CSRF vulnerabilities in LetoDMS (formerly MyDMS) mailing-list
- 37828 vdb-entry
- letodms-oplogin-file-include(55709) vdb-entry
- www.sec-consult.com