CVE-2015-5353

2015-07-0116:00:00

mitre

www.cve.org

7.1 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

JSON

Directory traversal vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the tab parameter to admin/.

References

hyp3rlinx.altervista.org/advisories/AS-NOVIUSOS0629.txt

packetstormsecurity.com/files/132478/Novius-OS-5.0.1-elche-XSS-LFI-Open-Redirect.html

www.securityfocus.com/archive/1/535876/100/0/threaded

www.securityfocus.com/bid/75533

www.exploit-db.com/exploits/37439/