Vulnerability CVE-2014-100029

Vulnerability CVE-2014-100029

Published: 2015-01-13

Description:

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) newlang or (2) newtheme parameter.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5/10	2.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	None	None

Affected software
Ganesha digital library project -> Ganesha digital library

References:

http://packetstormsecurity.com/files/125464

https://exchange.xforce.ibmcloud.com/vulnerabilities/91555

Copyright 2024, cxsecurity.com