CVE-2013-7097

Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the showmask parameter to installer/overview.php.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-01-08

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Edutrac (7mediaws)

References

• http://www.securityfocus.com/bid/64255
• https://www.htbridge.com/advisory/HTB23190