Vulnerability Details CVE-2012-1467
Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to (1) delete or (2) rename arbitrary files via a .. (dot dot) in the param parameter to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/rfiles.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.031
EPSS Ranking 87.0%
CVSS Severity
CVSS v2 Score 6.5
References
Products affected by CVE-2012-1467
-
cpe:2.3:a:pkp:open_journal_systems:*