Vulnerability Details CVE-2013-3598
Directory traversal vulnerability in servlet/CreateTemplateServlet in SearchBlox before 7.5 build 1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the name parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://buddhalabs.com/Advisories/WebAdvisories.html
- http://osvdb.org/96619
- http://www.kb.cert.org/vuls/id/592942
- http://www.searchblox.com/developers-2/change-log
- http://buddhalabs.com/Advisories/WebAdvisories.html
- http://osvdb.org/96619
- http://www.kb.cert.org/vuls/id/592942
- http://www.searchblox.com/developers-2/change-log
Products affected by CVE-2013-3598
-
cpe:2.3:a:searchblox:searchblox:-
-
cpe:2.3:a:searchblox:searchblox:6.2
-
cpe:2.3:a:searchblox:searchblox:6.3
-
cpe:2.3:a:searchblox:searchblox:6.4
-
cpe:2.3:a:searchblox:searchblox:7.0
-
cpe:2.3:a:searchblox:searchblox:7.1
-
cpe:2.3:a:searchblox:searchblox:7.2
-
cpe:2.3:a:searchblox:searchblox:7.3
-
cpe:2.3:a:searchblox:searchblox:7.4
-
cpe:2.3:a:searchblox:searchblox:7.5