CVE-2014-9261 The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which allows remote attackers to read arbitrary files via a .. (dot dot) in the path p...
MediumCVSS 5.0
EPSS 9.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codologic codoforum | = 2.5.1 | No fix listed |
References
- 119412 vdb-entry
- packetstormsecurity.com exploit
- security.szurek.pl exploit
- 36320 exploit
- codoforum.com vendor-advisory