CVE-2011-4711

namazu < 2.0.16 - Path Traversal via lang or result Parameter

Title source: llm
STIX 2.1

Description

Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) result parameter.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.namazu.org/security.html#
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71489

Scores

EPSS 0.0175
EPSS Percentile 75.1%

Details

CWE
CWE-22
Status published
Products (41)
namazu/namazu 0.1.0
namazu/namazu 0.1.1
namazu/namazu 0.1.2
namazu/namazu 0.1.3
namazu/namazu 0.1.4
namazu/namazu 0.2.0
namazu/namazu 0.2.1
namazu/namazu 0.2.2
namazu/namazu 0.3.0
namazu/namazu 0.3.1
... and 31 more
Published Dec 08, 2011
Tracked Since Feb 18, 2026