CVE

Id
63461  
CVE No.
CVE-2013-3514  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a .. (dot dot) in the group parameter to (1) plugin-preferences.php or (2) plugin-settings.php in www/admin, a different vulnerability than CVE-2013-7376. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to read arbitrary files.  
Phase
Assigned (20130508)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
629621 63461 CVE-2013-3514 BUGTRAQ:20130703 Multiple Vulnerabilities in OpenX  View
629622 63461 CVE-2013-3514 URL:http://seclists.org/bugtraq/2013/Jul/27  View
629623 63461 CVE-2013-3514 MISC:https://www.htbridge.com/advisory/HTB23155  View
629624 63461 CVE-2013-3514 OSVDB:94778  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23779 JVNDB-2013-005354 複数の VMware 製品の lgtosync.sys におけるゲスト OS の権限を取得される脆弱性 VMware Workstation、VMware Player、VMware Fusion、VMware ESXi、および VMware ESX の lgtosync.sys には、Windows 32-bit ゲスト OS を使用する場合、ゲスト OS の権限を取得される脆弱性が存在します。 CVE-2013-3519 63461 7.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005354.html  View