medium6.5Public exploit code
CVE-2019-14312
Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Aptana Jaxer 1.0.3.4547 - Local File inclusion2019-08-08 · webapps · multiple
Impact
Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This vulnerability allows a remote attacker to read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aptana | Jaxer | Version 1.0.3.4547 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153985/Aptana-Jaxer-1.0.3.4547-Local-File-Inclusion.html
- https://github.com/aptana/Jaxer/commits/master
- http://packetstormsecurity.com/files/153985/Aptana-Jaxer-1.0.3.4547-Local-File-Inclusion.html
- https://github.com/aptana/Jaxer/commits/master