CVE-2011-4713

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.43%

Published

Dec 8, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBosCSS2 - '_ID' Local file Inclusion

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the _ID parameter to (1) catalog/shopping_cart.php or (2) catalog/content.php.

Weaknesses (CWE)

CWE-22

Affected Products (9)

oscss · oscssvulnerable

References (14)

http://forums.oscss.org/2-security/oscss2-id-parameter-local-file-inclusion-t1999.html#p11194

http://oscss.svn.sourceforge.net/viewvc/oscss?view=revision&revision=3872

http://seclists.org/fulldisclosure/2011/Nov/117

Exploit

http://secunia.com/advisories/46741

Vendor Advisory

http://www.exploit-db.com/exploits/18099

Exploit

http://www.rul3z.de/advisories/SSCHADV2011-034.txt

Exploit

http://www.securityfocus.com/archive/1/520421

Exploit

http://forums.oscss.org/2-security/oscss2-id-parameter-local-file-inclusion-t1999.html#p11194

http://oscss.svn.sourceforge.net/viewvc/oscss?view=revision&revision=3872

http://seclists.org/fulldisclosure/2011/Nov/117

Exploit

http://secunia.com/advisories/46741

Vendor Advisory

http://www.exploit-db.com/exploits/18099

Exploit

http://www.rul3z.de/advisories/SSCHADV2011-034.txt

Exploit

http://www.securityfocus.com/archive/1/520421

Exploit

KEV Catalog EPSS Scores Vendors All CVEs