Vulnerability in Cosmoshop
CVE-2005-2786
Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
EPSS: 0.012 (65.4th percentile) — read the EPSS interpretation.
Affected products
- Cosmoshop — versions 8.10.78
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)