CVE-2008-1606

Multiple directory traversal vulnerabilities in Elastic Path (EP) 4.1 and 4.1.1 allow remote attackers to (1) download arbitrary files via a .

published April 1, 2008

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in Elastic Path (EP) 4.1 and 4.1.1 allow remote attackers to (1) download arbitrary files via a .. (dot dot) in the file parameter to manager/getImportFileRedirect.jsp, (2) upload arbitrary files via a "..\" (dot dot backslash) in the file parameter to importData.jsp, and (3) list directory contents via a .. (dot dot) in the dir parameter to manager/fileManager.jsp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02141 · 81.9th percentile
Published
2008-04-01T16:00Z
EPSS history
Timeline
  • 01 APR 16:00Z
    Multiple directory traversal vulnerabilities in Elastic Path (EP) 4.1 and 4.1.1 allow remote attackers to (1) download arbitrary files via a .
    cvelistv5