 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2011-4715 |
| Description: | Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.902593 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2011-4715 BugTraq ID: 50812 http://www.securityfocus.com/bid/50812 http://www.exploit-db.com/exploits/18153 http://www.vigasis.com/en/?guncel_guvenlik=LibLime%20Koha%20%3C=%204.2%20Local%20File%20Inclusion%20Vulnerability&lnk=exploits/18153 http://osvdb.org/77322 http://secunia.com/advisories/46980 XForce ISS Database: liblimekoha-opacmain-file-include(71478) https://exchange.xforce.ibmcloud.com/vulnerabilities/71478 |