Unscored CVE-2012-1471 EUVD-2012-1489GHSA-gm2r-jhgq-w3p4

Directory traversal vulnerability in catalogue_file.php in ocPortal before 7.1.6 allows remote attackers to read arbitrary files via a .. (…

Published Oct 1, 2012 · Updated Sep 16, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in catalogue_file.php in ocPortal before 7.1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

References

http://ocportal.com/site/news/view/ocportal-security-update.htm
http://ocportal.com/site/news/view/new-releases/ocportal-7-1-6-released.htm
https://www.htbridge.com/advisory/HTB23078