CVE-2011-4640

2022-10-0316:15:14

mitre

www.cve.org

directory traversal

spamtitan

webtitan

3.60

remote authenticated users

arbitrary files

6.2 Medium

AI Score

Confidence

Low

0.046 Low

EPSS

Percentile

92.6%

JSON

Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a … (dot dot) in the fname parameter in a view action.

References

www.sec-1.com/blog/?p=211