CVE-2012-1467

Published: Sep 6, 2012Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to (1) delete or (2) rename arbitrary files via a .. (dot dot) in the param parameter to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/rfiles.php.

Affected (1)

Products: Pkp: Open Journal Systems

1 product

Open Journal Systems

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pkp Open Journal Systems	Up to 2.3.6

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (4)

http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431

Source: cve@mitre.org

https://www.htbridge.com/advisory/HTB23079

Source: cve@mitre.org

Exploit

http://pkp.sfu.ca/support/forum/viewtopic.php?f=2&t=8431

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.htbridge.com/advisory/HTB23079

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.