Description

Directory traversal vulnerability in osCommerce Japanese 2.2ms1j-R8 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors.

Remediation

References

CVE-2015-2965

Related Vulnerabilities

WordPress Plugin Shopp Arbitrary File Upload (1.4)

Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0422)

Undertow Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-3859)

WordPress Plugin SVG Support Cross-Site Scripting (2.3.19)

WordPress Plugin simple sort&search Cross-Site Scripting (0.0.3)

Severity

Medium

Classification

CVE-2015-2965 CWE-22

Tags

Missing Update Known Vulnerabilities