NetSight
medium5.0

CVE-2011-4711

Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a ..

Impact

Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) result parameter.

Affected products

VendorProductAffected versions
NamazuNamazu
through 2.0.16
Versions 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4

Weakness classification

References