Directory traversal

2012-11-1721:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.098 Low

EPSS

Percentile

94.9%

JSON

Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a … (dot dot) in the module parameter in a “3” action.

CPENameOperatorVersion
tomatocarteq1.2.0 alpha2

CPE	Name	Operator	Version
	tomatocart	eq	1.2.0 alpha2

References

osvdb.org/80689

packetstormsecurity.org/files/111291/TomatoCart-1.2.0-Alpha-2-Local-File-Inclusion.html

www.mavitunasecurity.com/local-file-inclusion-vulnerability-in-tomatocart/

www.securityfocus.com/bid/52766

exchange.xforce.ibmcloud.com/vulnerabilities/74459