CVE-2011-4715

EPSS 9.4%

Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/18153unverified exploitdbwww.exploit-db.com/exploits/18153unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://koha-community.org/koha-3-4-7/#more-2971 http://koha-community.org/koha-3-6-1/#more-2929 http://osvdb.org/77322 http://secunia.com/advisories/46980 https://exchange.xforce.ibmcloud.com/vulnerabilities/71478 https://github.com/liblime/LibLime-Koha/commit/8ea6f7bc37d05a9ec25b5afbea011cf9de5f1e49#C4/Output.pm http://www.exploit-db.com/exploits/18153 http://www.securityfocus.com/bid/50812 http://www.vigasis.com/en/?guncel_guvenlik=LibLime%20Koha%20%3C=%204.2%20Local%20File%20Inclusion%20Vulnerability&lnk=exploits/18153