CVE-2008-7093

Multiple directory traversal vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to (1) create arbitrary directories or files via a .. (dot dot) in the folder name in the new folder functionality or (2) list arbitrary files via a crafted request to Campaign/CampaignListener.

Link	Resource
http://www.portcullis.co.uk/287.php
http://secunia.com/advisories/31280	Vendor Advisory
http://www.securityfocus.com/bid/30433
http://www.portcullis.co.uk/291.php
http://www.osvdb.org/47519
http://www.osvdb.org/47529
https://exchange.xforce.ibmcloud.com/vulnerabilities/44075
https://exchange.xforce.ibmcloud.com/vulnerabilities/44071

Configuration 1

cpe:2.3:a:unica:affinium_campaign:7.2.1.0.55:*:*:*:*:*:*:*

---

Published : 2009-08-26 02:24

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-7093

Mitre link : CVE-2008-7093

Affinium Campaign

Unica

CWE-22