CVE-2013-5639

Gnew 2013.1 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the gnew_language cookie.

Exploits (1)

exploitdb WRITEUP
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/28684

References (3)

Scores

EPSS 0.0459
EPSS Percentile 89.0%

Classification

CWE
CWE-22
Status draft

Affected Products (1)

raoul_proenca/gnew < 2013.1

Timeline

Published Mar 11, 2014
Tracked Since Feb 18, 2026