PT-2013-4504

Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 7.5 build 1 Description The issue allows remote attackers to overwrite arbitrary files via a .. dot dot in the name parameter of the servlet/CreateTemplateServlet. Recommendations For versions prior to 7.5 build 1,...

CVE-2013-3598: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary files via a .. dot dot in the name parameter...