CVE-2011-5141

MEDIUM 6.0CVE-2011-5141 · Published 31/08/2012 · updated 16/06/2026

In short

CVE-2011-5141 is a MEDIUM (CVSS 6.0) vulnerability affecting open business management (obm).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
open business management obm	`≤ 2.4.0`	No fix yet

Description

Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the module parameter in an export_page action.

References

osvdb.org/78003 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/71921
htbridge.ch/advisory/multiple_vulnerabilities_in_obm.html · Exploit

More vulnerabilities in open business management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free