PT-2015-3506 · Wikipad · Wikipad
Published
2015-01-01
·
Updated
2015-01-02
·
CVE-2011-5310
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Wikipad version 1.6.0
Description
A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the
id parameter of the pages.php file.Recommendations
For Wikipad version 1.6.0, consider restricting access to the pages.php file or the
id parameter to minimize the risk of exploitation until a patch is available.Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wikipad