CVE-2011-4713

🗓️ 08 Dec 2011 19:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 37 Views🌐 WEB

Directory traversal vulnerability in osCSS2 2.1.0 and earlie

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2011-4713	9 Nov 201100:00	–	circl
Cvelist	CVE-2011-4713	8 Dec 201119:00	–	cvelist
NVD	CVE-2011-4713	8 Dec 201119:55	–	nvd
OpenVAS	osCSS2 < 2.1.1 Directory Traversal Vulnerability - Active Check	12 Dec 201100:00	–	openvas
Prion	Directory traversal	8 Dec 201119:55	–	prion
RedhatCVE	CVE-2011-4713	22 May 202501:37	–	redhatcve

NVD

Node

oscss oscssRange≤2.10prerc31

oscss oscssMatch1.2.2rc_c

oscss oscssMatch2.10prerc_f

oscss oscssMatch2.10prerc_g1

oscss oscssMatch2.10prerc12

oscss oscssMatch2.10prerc30

oscss oscssMatch2.10rc5

Source	Link
seclists	www.seclists.org/fulldisclosure/2011/Nov/117
secunia	www.secunia.com/advisories/46741
forums	www.forums.oscss.org/2-security/oscss2-id-parameter-local-file-inclusion-t1999.html
exploit-db	www.exploit-db.com/exploits/18099
rul3z	www.rul3z.de/advisories/SSCHADV2011-034.txt
oscss	www.oscss.svn.sourceforge.net/viewvc/oscss
securityfocus	www.securityfocus.com/archive/1/520421

Parameter	Position	Path	Description	CWE
_ID	query param	catalog/shopping_cart.php	Directory traversal via _ID enables reading arbitrary files on the server.	CWE-22
_ID	query param	catalog/content.php	Directory traversal via _ID enables reading arbitrary files on the server.	CWE-22

29 Apr 2026 01:13Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25

EPSS0.07979