Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-5692
cve-2013-5692
nvd
x2engine
x2crm
directory traversal
vulnerability
remote authentication
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.1%
Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a … (dot dot) in the file parameter to index.php/admin/translationManager.
Affected configurations
Node
x2enginex2crmRange≤3.4.1
ORx2enginex2crmMatch1.0
ORx2enginex2crmMatch1.0.1
ORx2enginex2crmMatch1.1.0
ORx2enginex2crmMatch1.2.0
ORx2enginex2crmMatch1.2.1
ORx2enginex2crmMatch1.2.2
ORx2enginex2crmMatch1.3
ORx2enginex2crmMatch1.3.1
ORx2enginex2crmMatch2.2
ORx2enginex2crmMatch2.2.1
ORx2enginex2crmMatch2.5
ORx2enginex2crmMatch2.5.2
ORx2enginex2crmMatch2.7
ORx2enginex2crmMatch2.7.1
ORx2enginex2crmMatch2.7.2
ORx2enginex2crmMatch2.8
ORx2enginex2crmMatch2.8.1
ORx2enginex2crmMatch2.9
ORx2enginex2crmMatch2.9.1
ORx2enginex2crmMatch3.0
ORx2enginex2crmMatch3.0.1
ORx2enginex2crmMatch3.0.2
ORx2enginex2crmMatch3.1
ORx2enginex2crmMatch3.1.1
ORx2enginex2crmMatch3.1.2
ORx2enginex2crmMatch3.2
ORx2enginex2crmMatch3.3
ORx2enginex2crmMatch3.3.1
ORx2enginex2crmMatch3.3.2
ORx2enginex2crmMatch3.4
Related
nvd
nvd
CVE-2013-5692
2013-09-30 22:55:04
zdt
zdt
X2CRM 3.4.1 - Multiple Vulnerabilities
2013-09-25 00:00:00
cvelist
cvelist
CVE-2013-5692
2022-10-03 16:14:54
prion
prion
Directory traversal
2013-09-30 22:55:00
exploitpack
exploitpack
X2CRM 3.4.1 - Multiple Vulnerabilities
2013-09-25 00:00:00
nessus
nessus
X2Engine < 3.5.1 Multiple Vulnerabilities
2015-02-25 00:00:00
packetstorm
packetstorm
X2CRM 3.4.1 Cross Site Scripting / Local File Inclusion
2013-09-25 00:00:00
htbridge
htbridge
Multiple Vulnerabilities in X2CRM
2013-09-04 00:00:00
securityvulns
securityvulns
Multiple Vulnerabilities in X2CRM
2013-10-02 00:00:00
seebug
seebug
X2CRM 3.4.1 - Multiple Vulnerabilities
2014-07-01 00:00:00
exploitdb
exploitdb
X2CRM 3.4.1 - Multiple Vulnerabilities
2013-09-25 00:00:00
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.1%
Related for CVE-2013-5692