CVE-2013-6056

OSSIM prior to version 4.3.3.1 is affected by a directory traversal vulnerability in tele_compress.php (timestamp parameter) that could allow a remote attacker to download arbitrary files, subject to web server privileges. This CVE (CVE-2013-6056) is documented across multiple sources (NVD entry ...

OSSIM tele_compress.php Directory Traversal

The OSSIM install hosted on the remote host has a directory traversal vulnerability. Input to the 'timestamp' parameter of the '/ossim/ocsreports/telecompress.php' script is not properly sanitized. A remote attacker could exploit this to download arbitrary files, subject to the privileges under...