CoDeSys CVE-2011-5058 Directory Traversal Vulnerability
BID:56732
Info
CoDeSys CVE-2011-5058 Directory Traversal Vulnerability
| Bugtraq ID: | 56732 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-5058 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 29 2011 12:00AM |
| Updated: | Nov 29 2011 12:00AM |
| Credit: | Luigi Auriemma |
| Vulnerable: |
3S-Software CoDeSys 3.4 SP4 Patch 2 3S-Software CoDeSys 2.3 |
| Not Vulnerable: |
3S-Software CoDeSys 3.5 3S-Software CoDeSys 2.3.9.32 |
Discussion
CoDeSys CVE-2011-5058 Directory Traversal Vulnerability
CoDeSys is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.
Exploiting this issue may allow an attacker to create arbitrary directories under the web root.
CoDeSys is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.
Exploiting this issue may allow an attacker to create arbitrary directories under the web root.