CVE-2012-1617: Path Traversal
Published Sep 26, 2012
·Updated
Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files.
Affected Software
22 affected components
Juan Ramon Osclass<=2.3.5
Juan Ramon Osclass=1.1
Juan Ramon Osclass=1.1-rc
Juan Ramon Osclass=1.2-alpha
Juan Ramon Osclass=1.2-beta
Juan Ramon Osclass=1.2-delta
Juan Ramon Osclass=2.0
Juan Ramon Osclass=2.0-rc
Juan Ramon Osclass=2.0.1
Juan Ramon Osclass=2.0.2
Juan Ramon Osclass=2.0.3
Juan Ramon Osclass=2.1
Juan Ramon Osclass=2.1.1
Juan Ramon Osclass=2.2
Juan Ramon Osclass=2.2.1
Juan Ramon Osclass=2.2.2
Juan Ramon Osclass=2.2.3
Juan Ramon Osclass=2.3
Juan Ramon Osclass=2.3.1
Juan Ramon Osclass=2.3.2
Juan Ramon Osclass=2.3.3
Juan Ramon Osclass=2.3.4
Remediation
Patch Available
Patch Available
Event History
Sep 26, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description