NVD

Id
40941  
Name
CVE-2013-5692  
Description
Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the file parameter to index.php/admin/translationManager.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-09-30  
Modified Date
2013-10-01  
Seq
2013-5692  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206941 40941 CVE-2013-5692 20130925 Multiple Vulnerabilities in X2CRM  View
206942 40941 CVE-2013-5692 28557  View
206943 40941 CVE-2013-5692 https://www.htbridge.com/advisory/HTB23172  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22844 JVNDB-2013-004419 X2Engine X2CRM におけるディレクトリトラバーサルの脆弱性 X2Engine X2CRM には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2013-5692 65634 CVE-2013-5692 40941 8.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004419.html 2013-09-10 2013-10-03 View