CVE-2011-4713

Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ID parameter to 1 catalog/shoppingcart.php or 2 catalog/content.php...

CVE-2011-4713

CVE-2011-4713 affects osCSS2, versions up to 2.1.0 and earlier. The vulnerability is a directory traversal issue in catalog/content.php (and catalog/shopping_cart.php) where an attacker can supply a .. in the _ID parameter to read arbitrary files. This is due to insufficient input validation in t...

CVE-2011-4713

Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ID parameter to 1 catalog/shoppingcart.php or 2 catalog/content.php...