CVE-2011-4713

MEDIUM 5.0CVE-2011-4713 · Published 08/12/2011 · updated 16/06/2026

In short

CVE-2011-4713 is a MEDIUM (CVSS 5.0) vulnerability affecting oscss (oscss).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 89.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
oscss oscss	`= 1.0= 1.1= 1.2.2= 2.10≤ 2.10`	No fix yet

Description

Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the _ID parameter to (1) catalog/shopping_cart.php or (2) catalog/content.php.

References

forums.oscss.org/2-security/oscss2-id-parameter-local-file-inclusion-t1999.html
oscss.svn.sourceforge.net/viewvc/oscss
seclists.org/fulldisclosure/2011/Nov/117 · Exploit
secunia.com/advisories/46741 · Vendor Advisory
exploit-db.com/exploits/18099 · Exploit
rul3z.de/advisories/SSCHADV2011-034.txt · Exploit
securityfocus.com/archive/1/520421 · Exploit

More vulnerabilities in oscss

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free