CVE-2013-7097

eduTrac <1.1.2 - Path Traversal

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the showmask parameter to installer/overview.php.

Exploits (1)

exploitdb WRITEUP VERIFIED
by High-Tech Bridge · textwebappsphp
https://www.exploit-db.com/exploits/38873

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/64255

Scores

EPSS 0.1466
EPSS Percentile 94.5%

Details

CWE
CWE-22
Status published
Products (11)
7mediaws/edutrac 1.0.0
7mediaws/edutrac 1.0.1
7mediaws/edutrac 1.0.2
7mediaws/edutrac 1.0.3
7mediaws/edutrac 1.0.4
7mediaws/edutrac 1.0.5
7mediaws/edutrac 1.0.6
7mediaws/edutrac 1.0.7
7mediaws/edutrac 1.0.8
7mediaws/edutrac 1.0.9
... and 1 more
Published Jan 08, 2014
Tracked Since Feb 18, 2026