CVE-2014-5258

MEDIUM 4.0CVE-2014-5258 · Published 06/11/2014 · updated 17/06/2026

Package	Affected versions	Patched versions
webedition cms webedition	`≤ 6.3.8.0`	No fix yet

Description

Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.

References

packetstormsecurity.com/files/128301/webEdition-6.3.8.0-Path-Traversal.html · Exploit
securityfocus.com/archive/1/533465/100/0/threaded
webedition.org/de/aktuelles/webedition-cms/webEdition-6.3.9-Beta-erschienen · Vendor Advisory
webedition.org/de/webedition-cms/versionshistorie/webedition-6/version-6.3.9.0 · Vendor Advisory
htbridge.com/advisory/HTB23227 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free