CVE-2011-4450 | BDVDB-2026-52071 Detail

Description#

Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to read or delete arbitrary files via a non-initial .. (dot dot) in the file parameter, as demonstrated by the /../../wikka.config.php pathname in a download action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://wush.net/trac/wikka/changeset/1828
http://wush.net/trac/wikka/ticket/1097

Exploit#

No public exploit known

History#

Version 12012-09-05Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.