Directory traversal

2012-02-1222:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.7%

JSON

Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the file parameter in an Online_help action.

CPENameOperatorVersion
cyberoam_central_consoleeq2.00.2

CPE	Name	Operator	Version
	cyberoam_central_console	eq	2.00.2

References

archives.neohapsis.com/archives/bugtraq/2012-02/0036.html

www.securityfocus.com/bid/51901

www.vulnerability-lab.com/get_content.php?id=405

www.exploit-db.com/exploits/18473