Published: 26/09/2012 Updated: 29/08/2017

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 645

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Directory traversal vulnerability in combine.php in OSClass prior to 2.3.6 allows remote malicious users to read and write arbitrary files via a .. (dot dot) in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
juan ramon osclass 2.1.1
juan ramon osclass 2.1
juan ramon osclass 2.2.1
juan ramon osclass 1.2
juan ramon osclass
juan ramon osclass 2.2
juan ramon osclass 2.3.3
juan ramon osclass 2.0
juan ramon osclass 2.2.3
juan ramon osclass 2.2.2
juan ramon osclass 2.3.2
juan ramon osclass 2.3.4
juan ramon osclass 2.0.2
juan ramon osclass 2.0.3
juan ramon osclass 2.3.1
juan ramon osclass 2.3
juan ramon osclass 1.1
juan ramon osclass 2.0.1

source: wwwsecurityfocuscom/bid/52336/info OSClass is prone to a directory-traversal vulnerability and an arbitrary-file-upload vulnerability An attacker can exploit these issues to obtain sensitive information and to upload arbitrary code and run it in the context of the webserver process OSClass 235 is vulnerable; prior versions m ...

CWE-22 http://www.codseq.it/advisories/osclass_directory_traversal_vulnerability http://www.securityfocus.com/bid/52336 http://osclass.org/2012/03/05/osclass-2-3-6/https://github.com/osclass/OSClass/commit/1e7626f4e1a26371480989c0b937f107ea9a6d4b http://archives.neohapsis.com/archives/bugtraq/2012-03/0024.html http://www.openwall.com/lists/oss-security/2012/04/04/7 http://secunia.com/advisories/48284 http://www.openwall.com/lists/oss-security/2012/04/02/6 http://www.openwall.com/lists/oss-security/2012/04/02/1 https://github.com/osclass/OSClass/commit/a40b76695994442644e46e1b776d79660500566a http://www.openwall.com/lists/oss-security/2012/04/03/1 https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/73755 https://exchange.xforce.ibmcloud.com/vulnerabilities/73754 https://nvd.nist.gov https://www.exploit-db.com/exploits/36917/

CVE-2012-1617

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect