CVE-2013-5979
NONE
Published Oct 2, 201312y ago · Modified Jun 16, 20262w ago
Published Oct 2, 2013 12y ago
Last Modified Jun 16, 2026 2w ago
Description
Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter to index.php.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-22 Path Traversal Resource Mgmt
Affected Products 8
| Vendor | Product | Version | Range |
|---|---|---|---|
| xibosignage | xibo | 1.2.0 | any |
| xibosignage | xibo | 1.2.0 | any |
| xibosignage | xibo | 1.2.0 | any |
| xibosignage | xibo | 1.2.1 | any |
| xibosignage | xibo | 1.2.2 | any |
| xibosignage | xibo | 1.4.0 | any |
| xibosignage | xibo | 1.4.0 | any |
| xibosignage | xibo | 1.4.1 | any |
References 2
- baesystemsdetica.com.au http://www.baesystemsdetica.com.au/Research/Advisories/Xibo-Directory-Traversal-Vulnerability-%28DS-2013-00
- bugs.launchpad.net https://bugs.launchpad.net/xibo/+bug/1093967
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.