CVE-2013-5979

NUCLEI

Xibo - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter to index.php.

Exploits (1)

exploitdb WORKING POC

by Mahendra · textwebappsphp

https://www.exploit-db.com/exploits/26955

View Code ZIP pw:eip

Nuclei Templates (1)

Xibo 1.2.2/1.4.1 - Directory Traversal

MEDIUMby daffainfo

References (2)

[Various Sources] http://www.baesystemsdetica.com.au/Research/Advisories/Xibo-Directory-Traversal-Vulnerability-%28DS-2013-00

[Exploit] https://bugs.launchpad.net/xibo/+bug/1093967

Scores

EPSS 0.3476

EPSS Percentile 97.0%

Details

CWE

CWE-22

Status published

Products (5)

xibosignage/xibo 1.2.0 (3 CPE variants)

xibosignage/xibo 1.2.1

xibosignage/xibo 1.2.2

xibosignage/xibo 1.4.0 (2 CPE variants)

xibosignage/xibo 1.4.1

Published Oct 02, 2013

Tracked Since Feb 18, 2026