Lucene search
HistoryDec 15, 2011 - 3:57 a.m.
CVE-2011-4832
cve
2011
4832
directory traversal
cauposhop pro
security vulnerability
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.4%
Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allows remote attackers to read arbitrary files via a … (dot dot) in the template parameter in a template action.
Affected configurations
Node
caupocauposhop_classicMatch3.01
ORcaupocauposhop_proRange≤3.70
ORcaupocauposhop_proMatch2.0
ORcaupocauposhop_proMatch2.1
Related
cvelist
cvelist
CVE-2011-4832
2011-12-15 02:00:00
openvas
openvas
CaupoShop 'template' Parameter Local File Include Vulnerability
2011-11-07 00:00:00
CaupoShop 'template' Parameter Local File Include Vulnerability
2011-11-07 00:00:00
prion
prion
Directory traversal
2011-12-15 03:57:00
nvd
nvd
CVE-2011-4832
2011-12-15 03:57:34
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.4%
Related for CVE-2011-4832