SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2014-5258

Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.0
Exploit Score: 8.0
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

http://www.securityfocus.com/archive/1/533465/100/0/threaded

http://packetstormsecurity.com/files/128301/webEdition-6.3.8.0-Path-Traversal.html

http://www.webedition.org/de/aktuelles/webedition-cms/webEdition-6.3.9-Beta-erschienen

http://www.webedition.org/de/webedition-cms/versionshistorie/webedition-6/version-6.3.9.0

https://www.htbridge.com/advisory/HTB23227


30479



423868



248678



909



195426



282