CVE-2011-4832

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.48%

Published

Dec 15, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBCaupoShop Pro (2.x < 3.70) Classic 3.01 - Local File Inclusion

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter in a template action.

Weaknesses (CWE)

CWE-22

Affected Products (4)

caupo · cauposhop_classicvulnerable

caupo · cauposhop_provulnerable

References (10)

http://secunia.com/advisories/46704

Vendor Advisory

http://www.exploit-db.com/exploits/18066

Exploit

http://www.osvdb.org/76871

http://www.securityfocus.com/bid/50530

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/71136

http://secunia.com/advisories/46704

Vendor Advisory

http://www.exploit-db.com/exploits/18066

Exploit

http://www.osvdb.org/76871

http://www.securityfocus.com/bid/50530

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/71136

KEV Catalog EPSS Scores Vendors All CVEs