Path Traversal in Egroupware
CVE-2011-4948
Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in the type parameter.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.023 (81.2th percentile) — read the EPSS interpretation.
Affected products
- Egroupware
- Egroupware Egroupware_enterprise_line
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)