PT-2013-5900 · Spring Signage · Spring Signage Xibo

Amril Jafni Joehari + 3 · Published 2013-10-02 · Updated 2025-12-08 · CVE-2013-5979

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Spring Signage Xibo versions 1.2.x through 1.2.2 Spring Signage Xibo versions 1.4.x through 1.4.1

Description The issue allows remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the p parameter to the "index.php" endpoint.

Recommendations For Spring Signage Xibo versions 1.2.x through 1.2.2, update to version 1.2.3 or later. For Spring Signage Xibo versions 1.4.x through 1.4.1, update to version 1.4.2 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2013-5979

Affected Products

Spring Signage Xibo

References · 5

• 🔥 https://exploit-db.com/exploits/26955 · Exploit
• 🔥 https://bugs.launchpad.net/xibo/+bug/1093967 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5979 · Security Note
• http://baesystemsdetica.com.au/Research/Advisories/Xibo-Directory-Traversal-Vulnerability-%28DS-2013-00 · Note
• https://t.me/cveNotify/145116 · Telegram Post