NVD

Id
43492  
Name
CVE-2012-1617  
Description
Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-09-25  
Modified Date
2012-09-26  
Seq
2012-1617  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
218577 43492 CVE-2012-1617 20120307 OSClass directory traversal (leads to arbitrary file upload)  View
218578 43492 CVE-2012-1617 http://osclass.org/2012/03/05/osclass-2-3-6/  View
218579 43492 CVE-2012-1617 http://www.codseq.it/advisories/osclass_directory_traversal_vulnerability  View
218580 43492 CVE-2012-1617 [oss-security] 20120402 CVE request: OSClass directory traversal vulnerability  View
218581 43492 CVE-2012-1617 [oss-security] 20120402 Re: CVE request: OSClass directory traversal vulnerability  View
218582 43492 CVE-2012-1617 [oss-security] 20120403 Re: CVE request: OSClass directory traversal vulnerability  View
218583 43492 CVE-2012-1617 [oss-security] 20120404 Re: CVE request: OSClass directory traversal vulnerability  View
218584 43492 CVE-2012-1617 52336  View
218585 43492 CVE-2012-1617 osclass-directory-traversal(73754)  View
218586 43492 CVE-2012-1617 osclass-file-upload(73755)  View
218587 43492 CVE-2012-1617 https://github.com/osclass/OSClass/commit/1e7626f4e1a26371480989c0b937f107ea9a6d4b  View
218588 43492 CVE-2012-1617 https://github.com/osclass/OSClass/commit/a40b76695994442644e46e1b776d79660500566a  View
218589 43492 CVE-2012-1617 https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28901 JVNDB-2012-004608 OSClass の combine.php におけるディレクトリトラバーサルの脆弱性 OSClass の combine.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2012-1617 54855 CVE-2012-1617 43492 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004608.html 2012-03-05 2012-09-27 View