CVE-2011-4832

2011-12-1502:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.5%

JSON

Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allows remote attackers to read arbitrary files via a … (dot dot) in the template parameter in a template action.

References

secunia.com/advisories/46704

www.exploit-db.com/exploits/18066

www.osvdb.org/76871

www.securityfocus.com/bid/50530

exchange.xforce.ibmcloud.com/vulnerabilities/71136