Directory traversal

2009-01-0617:30:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

JSON

Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory traversal sequences in the ftype parameter.

CPENameOperatorVersion
classeq0.8.59
classeq0.4.2
classeq0.8.10
classeq0.6.1
classeq0.8.47
classeq0.8.26
classeq0.8.0
classle0.8.60
classeq0.5.1
classeq0.6.0

Name	Operator	Version
class	eq	0.8.59
class	eq	0.4.2
class	eq	0.8.10
class	eq	0.6.1
class	eq	0.8.47
class	eq	0.8.26
class	eq	0.8.0
class	le	0.8.60
class	eq	0.5.1
class	eq	0.6.0

Rows per page:

1-10 of 261

References

osvdb.org/50807

secunia.com/advisories/33222

sourceforge.net/project/shownotes.php?release_id=648307

www.securityfocus.com/bid/32929

exchange.xforce.ibmcloud.com/vulnerabilities/47493

www.exploit-db.com/exploits/7579