Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
References
Link | Resource |
---|---|
http://secunia.com/advisories/16625/ | Vendor Advisory |
http://marc.info/?l=bugtraq&m=112534390600093&w=2 |
Configurations
Information
Published : 2005-09-02 16:03
Updated : 2016-10-17 20:30
NVD link : CVE-2005-2786
Mitre link : CVE-2005-2786
JSON object : View
CWE
Products Affected
cosmoshop
- cosmoshop