Security Advisory

CVE-2012-1467

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-09-06 21:00:00

Last updated 2024-09-17 03:48:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to (1) delete or (2) rename arbitrary files via a .. (dot dot) in the param parameter to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/rfiles.php.

← Browse all CVEs View on cve.org ↗