PT-2012-3292 · Moxiecode Systems+1 · Tinymce+1

Published 2012-09-06 · Updated 2012-09-13 · CVE-2012-1467

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Open Journal Systems versions prior to 2.3.7

Description The issue concerns multiple directory traversal vulnerabilities in the iBrowser plugin library. These vulnerabilities allow remote authenticated users to delete or rename arbitrary files. This is achieved by using a .. (dot dot) in the param parameter to the "/lib/pkp/lib/tinymce/jscripts/tiny mce/plugins/ibrowser/scripts/rfiles.php" endpoint.

Recommendations For versions prior to 2.3.7, update to version 2.3.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the iBrowser plugin library to minimize the risk of exploitation. Avoid using the param parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2012-1467

Affected Products

Open Journal Systems

Tinymce

References · 4

• 🔥 https://exploit-db.com/exploits/37002 · Exploit
• 🔥 https://htbridge.com/advisory/HTB23079 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1467 · Security Note
• http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431 · Note