CVE-2011-4640 in WebTitan
Résumé (Anglaise)
Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the fname parameter in a view action.
Be aware that VulDB is the high quality source for vulnerability data.
Réserver
29/11/2011
Divulgation
08/10/2012
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 62597 | SpamTitan WebTitan logs-x.php directory traversal | 22 | Preuve de concept | Correctif officiel | CVE-2011-4640 |