CVE-2012-6038 admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move...
MediumCVSS 6.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the (1) dir parameter in a fileman or (2) filemanview action. NOTE: this issue has been referred to as a "path traversal."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| razorcms | <= 1.2 | No fix listed |
| razorcms | = 0.2 | No fix listed |
| razorcms | = 0.2-rc | No fix listed |
| razorcms | = 0.2-rc2 | No fix listed |
| razorcms | = 0.3 | No fix listed |
| razorcms | = 0.3-beta | No fix listed |
| razorcms | = 0.3-beta1 | No fix listed |
| razorcms | = 0.3-beta2 | No fix listed |
| razorcms | = 0.3-rc | No fix listed |
| razorcms | = 0.3-rc2 | No fix listed |
| razorcms | = 0.4 | No fix listed |
| razorcms | = 1.0 | No fix listed |
| razorcms | = 1.0-beta | No fix listed |
| razorcms | = 1.0-beta2 | No fix listed |
| razorcms | = 1.0-rc | No fix listed |
| razorcms | = 1.1 | No fix listed |
References
- 78230 vdb-entry
- 47461 third-party-advisory vendor-advisory
- 18344 exploit
- www.razorcms.co.uk patch
- 51344 exploit vdb-entry
- razorcms-adminfunc-security-bypass(72268) vdb-entry