CVE-2011-1715

MEDIO 5.0CVE-2011-1715 · Published 18/04/2011 · updated 16/06/2026

In breve

CVE-2011-1715 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda qooxdoo (qooxdoo).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 8.9%, superiore al 95.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
qooxdoo qooxdoo	`= 1.3`	No fix yet

Description

Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to read arbitrary files via ..%2f (encoded dot dot) sequences in the file parameter.

References

blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues
osvdb.org/71719 · Exploit
osvdb.org/71721
secunia.com/advisories/43818 · Vendor Advisory
secunia.com/advisories/43997 · Vendor Advisory
autosectools.com/Advisories/eyeOS.2.3_Local.File.Inclusion_173.html · Exploit
exploit-db.com/exploits/17127 · Exploit
securityfocus.com/bid/47184 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/66574
exchange.xforce.ibmcloud.com/vulnerabilities/66575

Altre vulnerabilità di qooxdoo

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free