PKP : Security vulnerabilities, CVEs directory traversal

CVE-2012-1467

Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to (1) delete or (2) rename arbitrary files via a .. (dot dot) in the param parameter to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/rfiles.php.

Max CVSS

6.5

EPSS Score

0.39%

Published

2012-09-06

Updated

2012-09-13

1 vulnerabilities found

PKP : Security Vulnerabilities, CVEs, (Directory traversal)

CVE-2012-1467