CVE-2014-8084: Path Traversal

Q: Which OSClass installations are affected?

OSClass versions before 3.4.3 are affected. The issue is in oc-includes/osclass/controller/ajax.php.

Q: What does an attacker need to exploit this issue?

The vulnerability is remotely exploitable with low attack complexity and requires no authentication. An attacker uses a custom action and supplies a directory-traversal sequence in the ajaxfile parameter to include and execute arbitrary local files.

Q: Is a fix available?

Yes. A patch is available; upgrade OSClass to version 3.4.3 or later.

Published Jan 5, 2015

Updated

Directory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3.4.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ajaxfile parameter in a custom action.

Affected Software

1 affected component

OSClass Osclass<=3.4.2

Remediation

Patch Available

http://blog.osclass.org/2014/10/09/osclass-3-4-3-ready-download/

Event History

Jan 5, 2015

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

Which OSClass installations are affected?

OSClass versions before 3.4.3 are affected. The issue is in oc-includes/osclass/controller/ajax.php.

What does an attacker need to exploit this issue?

The vulnerability is remotely exploitable with low attack complexity and requires no authentication. An attacker uses a custom action and supplies a directory-traversal sequence in the ajaxfile parameter to include and execute arbitrary local files.

Is a fix available?

Yes. A patch is available; upgrade OSClass to version 3.4.3 or later.

CVE-2014-8084: Path Traversal

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

Which OSClass installations are affected?

What does an attacker need to exploit this issue?

Is a fix available?

Company

Resources

Contact

Frequently Asked Questions

Which OSClass installations are affected?

What does an attacker need to exploit this issue?

Is a fix available?