CVE-2011-4713 Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the _ID parameter to (1) catalog/shopping_car...
MediumCVSS 5.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the _ID parameter to (1) catalog/shopping_cart.php or (2) catalog/content.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oscss | <= 2.10 | No fix listed |
| oscss | = 1.0 | No fix listed |
| oscss | = 1.1 | No fix listed |
| oscss | = 1.2.2-rc_c | No fix listed |
| oscss | = 2.10-prerc_f | No fix listed |
| oscss | = 2.10-prerc_g1 | No fix listed |
| oscss | = 2.10-prerc12 | No fix listed |
| oscss | = 2.10-prerc30 | No fix listed |
| oscss | = 2.10-rc5 | No fix listed |
References
- forums.oscss.org
- oscss.svn.sourceforge.net
- 20111109 osCSS2 "_ID" parameter Local file inclusion exploit mailing-list
- 46741 third-party-advisory vendor-advisory
- 18099 exploit
- www.rul3z.de exploit
- 20111106 osCSS2 "_ID" parameter Local file inclusion exploit mailing-list