CVE

Id
13536  
CVE No.
CVE-2005-2330  
Status
Candidate  
Description
Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter.  
Phase
Assigned (20050720)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
97981 13536 CVE-2005-2330 BUGTRAQ:20060414 osCommerce "extras/" information/source code disclosure  View
97982 13536 CVE-2005-2330 URL:http://www.securityfocus.com/archive/1/431012  View
97983 13536 CVE-2005-2330 BUGTRAQ:20060414 RE: osCommerce "extras/" information/source code disclosure  View
97984 13536 CVE-2005-2330 URL:http://www.securityfocus.com/archive/1/431068  View
97985 13536 CVE-2005-2330 MISC:http://retrogod.altervista.org/oscommerce_22_adv.html  View
97986 13536 CVE-2005-2330 MISC:http://sourceforge.net/mailarchive/message.php?msg_id=12318248  View
97987 13536 CVE-2005-2330 MISC:http://www.oscommerce.com/community/bugs,2835  View
97988 13536 CVE-2005-2330 BID:14294  View
97989 13536 CVE-2005-2330 URL:http://www.securityfocus.com/bid/14294  View
97990 13536 CVE-2005-2330 OSVDB:18249  View
97991 13536 CVE-2005-2330 URL:http://www.osvdb.org/18249  View
97992 13536 CVE-2005-2330 SECTRACK:1015944  View
97993 13536 CVE-2005-2330 URL:http://securitytracker.com/id?1015944  View
97994 13536 CVE-2005-2330 XF:oscommerce-extrasupdate-info-disclosure(25861)  View

Related JVN