CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2020/01/27 10:15 p.m.•38 views

CVE-2013-2474

Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter...

7.5CVSS7.5AI score0.10008EPSS

Exploits4References3

Cvelist•added 2020/01/27 9:46 p.m.•41 views

CVE-2013-2474

Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter...

7.5AI score0.10008EPSS

Exploits4References3

CVE•added 2020/01/27 9:46 p.m.•52 views

CVE-2013-2474

AWS XMS 2.5 is affected by CVE-2013-2474, a directory traversal vulnerability in importer.php?what that allows remote attackers to read arbitrary files. The root cause is insufficient filtration of the what parameter before it is used in PHP file() (and related code paths), enabling access to sen...

7.5CVSS7.4AI score0.10008EPSS

Exploits4References3Affected Software1