Directory Traversal Vulnerability in OSClass by OSClass
CVE-2014-6308

Currently unrated

Key Information:

Vendor

Osclass

Status
Osclass
Vendor
CVE Published:
20 October 2014

What is CVE-2014-6308?

A directory traversal vulnerability exists in OSClass prior to version 3.4.2, enabling remote attackers to exploit the system by manipulating file parameters. This security issue permits unauthorized users to read sensitive files and potentially disclose information about the server's structure and data. The vulnerability arises from improper validation in the file handling mechanism within the oc-admin/index.php render action. It is crucial for users of OSClass to update to the latest version to mitigate this risk.

References

http://blog.osclass.org/2014/09/15/osclass-3-4-2-ready-do...
x_refsource_CONFIRM
http://packetstormsecurity.com/files/128285/OsClass-3.4.1...
x_refsource_MISC
https://www.netsparker.com/lfi-vulnerability-in-osclass/
x_refsource_MISC

EPSS Score

22% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.