Lucene search
K

CVE-2013-0136

🗓️ 01 Jun 2013 10:00:00Reported by certccType 
cve
 cve
🔗 web.nvd.nist.gov👁 52 Views🌐 WEB

Mutiny before 5.0-1.11 EditDocument servlet allows remote users to execute arbitrary programs and cause denial of service

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Mutiny 5 Arbitrary File Upload Vulnerability
16 May 201300:00
zdt
Tenable Nessus
Mutiny < 5.0-1.11 Multiple Directory Traversals
21 May 201300:00
nessus
Tenable Nessus
Mutiny < 5.0-1.11 Multiple Directory Traversals
17 May 201300:00
nessus
ATTACKERKB
CVE-2013-0136
1 Jun 201314:21
attackerkb
Circl
CVE-2013-0136
17 May 201300:00
circl
Check Point Advisories
Mutiny FrontEnd Arbitrary File Read and Delete (CVE-2013-0136)
29 May 201300:00
checkpoint_advisories
Check Point Advisories
Mutiny FrontEnd Arbitrary File Upload (CVE-2013-0136)
5 Jun 201300:00
checkpoint_advisories
Cvelist
CVE-2013-0136
1 Jun 201310:00
cvelist
Exploit DB
Mutiny 5 - Arbitrary File Upload (Metasploit)
17 May 201300:00
exploitdb
Metasploit
Mutiny 5 Arbitrary File Read and Delete
15 May 201314:02
metasploit
Rows per page
NVD
Node
ParameterPositionPathDescriptionCWE
operationrequest bodyinterface/EditDocumentDirectory traversal via EditDocument allowing COPY to attacker-controlled path (read/exfiltration) or related traversal operations.CWE-22
paths[]request bodyinterface/EditDocumentDirectory traversal via EditDocument allowing COPY to attacker-controlled path (read/exfiltration) or related traversal operations.CWE-22
newPathrequest bodyinterface/EditDocumentDirectory traversal via EditDocument allowing COPY to attacker-controlled path (read/exfiltration) or related traversal operations.CWE-22
operationrequest bodyinterface/EditDocumentDirectory traversal via EditDocument enabling DELETE of arbitrary files through crafted traversal paths.CWE-22
paths[]request bodyinterface/EditDocumentDirectory traversal via EditDocument enabling DELETE of arbitrary files through crafted traversal paths.CWE-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation