CVE-2014-5258

CVE-2014-5258 affects webEdition CMS (pre-6.3.9.0 Beta) where showTempFile.php is vulnerable to directory traversal via the file parameter. The flaw allows remote authenticated users to read arbitrary server files by crafting ../ sequences. Public sources (HTB HTB23227 advisory and CVE entries) c...

PT-2014-6372

Name of the Vulnerable Software and Affected Versions webEdition CMS versions prior to 6.3.9.0 Beta Description The issue allows remote authenticated users to read arbitrary files. This is achieved by exploiting a directory traversal vulnerability in the showTempFile.php file, specifically by usi...

CVE-2014-5258: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter...