CVE-2013-5979 | BDVDB-2026-57761 Detail

Description#

Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter to index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.baesystemsdetica.com.au/Research/Advisories/Xibo-Directory-Traversal-Vulnerability-%28DS-2013-00
https://bugs.launchpad.net/xibo/+bug/1093967

Exploit#

No public exploit known

History#

Version 12013-10-02Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.