CVE-2013-5107

NONE EPSS 76.3%
Published Dec 14, 201312y ago · Modified Jun 16, 20262w ago
Find Similar
Published Dec 14, 2013 12y ago
Last Modified Jun 16, 2026 2w ago

Description

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ROCK_LANG cookie, as demonstrated in a login.index action to index.php.

Threat Intelligence

EPSS Exploit Probability
76.3% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 18

VendorProductVersionRange
rockmongorockmongo* ≤1.1.5
rockmongorockmongo1.0any
rockmongorockmongo1.0.1any
rockmongorockmongo1.0.2any
rockmongorockmongo1.0.3any
rockmongorockmongo1.0.4any
rockmongorockmongo1.0.5any
rockmongorockmongo1.0.6any
rockmongorockmongo1.0.7any
rockmongorockmongo1.0.8any
rockmongorockmongo1.0.9any
rockmongorockmongo1.0.10any
rockmongorockmongo1.0.11any
rockmongorockmongo1.0.12any
rockmongorockmongo1.1.1any
rockmongorockmongo1.1.2any
rockmongorockmongo1.1.3any
rockmongorockmongo1.1.4any

References 1

  • trustwave.com https://www.trustwave.com/spiderlabs/advisories/TWSL2013-026.txt
    Exploit

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.