osCommerce File Manager Directory Traversal Vulnerab- ã¾ã£ã¡ã‚ƒã ã„ãµãã®æ—¥è¨˜â˜…ã¨ã‚Œã‚“ã©ãµã‚Šãƒ¼ã★ility:osCommerceã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ«ãªè„†å¼±æ€§ãŒå‡ºã¦ã„ã¾ã™ãŒ4年も放置ã•ã‚Œã¦ã‚‹ã‚“ã ãã‡ãƒ»ãƒ»ãƒ» Published: May 17 2004 12:00AM Updated: May 05 2008 09:16PM ã‰ãƒã‰ãƒï¼ã“ã‚“ãªè„†å¼±æ€§ã§ã™ã‹ï¼ osCommerce has a directory-traversal vulnerability that allows a remote attacker to possibly obtain sensitive information. The software improperly sanitizes user-supplied input and allows '../' directory-traversal character sequences when serving files. This allows the att
{{#tags}}- {{label}}
{{/tags}}