Description

Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. (dot dot) in the filename argument.

Remediation

References

CVE-2004-2021

Related Vulnerabilities

PostgreSQL Other Vulnerability (CVE-2005-1409)

Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-4360)

WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (4.0.2)

WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty SQL Injection (3.0.2)

MySQL Other Vulnerability (CVE-2004-0835)

Severity

Medium

Classification

CVE-2004-2021

Tags

Missing Update Known Vulnerabilities