Vulnerability Description
Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the module parameter in an export_page action.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Obm | Open Business Management | <= 2.4.0 |
Related Weaknesses (CWE)
References
- http://osvdb.org/78003Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71921
- https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.htmlExploit
- http://osvdb.org/78003Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71921
- https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.htmlExploit
FAQ
What is CVE-2011-5141?
CVE-2011-5141 is a vulnerability with a CVSS score of 6.0 (MEDIUM). Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local fil...
How severe is CVE-2011-5141?
CVE-2011-5141 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-5141?
Check the references section above for vendor advisories and patch information. Affected products include: Obm Open Business Management.