NVD

Id
11067  
Name
CVE-2011-4715  
Description
Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-12-08  
Modified Date
2013-09-10  
Seq
2011-4715  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61633 11067 CVE-2011-4715 http://koha-community.org/koha-3-4-7/#more-2971  View
61634 11067 CVE-2011-4715 http://koha-community.org/koha-3-6-1/#more-2929  View
61635 11067 CVE-2011-4715 18153  View
61636 11067 CVE-2011-4715 50812  View
61637 11067 CVE-2011-4715 http://www.vigasis.com/en/?guncel_guvenlik=LibLime%20Koha%20%3C=%204.2%20Local%20File%20Inclusion%20Vulnerability&lnk=exploits/18153  View
61638 11067 CVE-2011-4715 liblimekoha-opacmain-file-include(71478)  View
61639 11067 CVE-2011-4715 https://github.com/liblime/LibLime-Koha/commit/8ea6f7bc37d05a9ec25b5afbea011cf9de5f1e49#C4/Output.pm  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33093 JVNDB-2011-003333 Koha および LibLime Koha におけるディレクトリトラバーサルの脆弱性 Koha および LibLime Koha の cgi-bin/koha/mainpage.pl には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2011-4715 52622 CVE-2011-4715 11067 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003333.html 2011-11-25 2011-12-13 View