Description
Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. (dot dot) in the filename argument.
Exploits (1)
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1010176
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108482902101519&w=2
URL Repurposed x_refsource_misc
http://www.excluded.org/advisories/advisory13.txt
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/6308
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16174
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/10364
Third Party Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2005-03/0378.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/11624
Scores
EPSS
0.0690
EPSS Percentile
91.4%
Details
Status
published
Products (5)
oscommerce/oscommerce
2.1
oscommerce/oscommerce
2.2_cvs
oscommerce/oscommerce
2.2_ms1
oscommerce/oscommerce
2.2_ms2
oscommerce/oscommerce
2.2_ms3
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026