Directory traversal

2012-08-3121:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.8%

JSON

Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local files via a … (dot dot) in the module parameter in an export_page action.

CPENameOperatorVersion
open_business_managementle2.4.0

CPE	Name	Operator	Version
	open_business_management	le	2.4.0

References

osvdb.org/78003

exchange.xforce.ibmcloud.com/vulnerabilities/71921

www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html