CVE-2010-4598 Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request.
MediumCVSS 5.0
EPSS 26.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecava integraxor | <= 3.6.4000.0 | No fix listed |
| ecava integraxor | = 3.5.3900.5 | No fix listed |
| ecava integraxor | = 3.5.3900.10 | No fix listed |
References
- aluigi.org exploit
- 42730 third-party-advisory
- 15802 exploit
- www.integraxor.com
- VU#979776 third-party-advisory us-government-resource
- 45535 exploit vdb-entry
- www.us-cert.gov
- ADV-2010-3304 vdb-entry vendor-advisory