Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows...

Vulnerability Description

Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files.

References

• http://archives.neohapsis.com/archives/bugtraq/2012-03/0024.html
• http://secunia.com/advisories/48284
• http://www.openwall.com/lists/oss-security/2012/04/03/1
• https://github.com/osclass/OSClass/commit/a40b76695994442644e46e1b776d79660500566a
• http://www.openwall.com/lists/oss-security/2012/04/04/7
• https://github.com/osclass/OSClass/commit/ff7ef8a97301aaaf6a97fe46c2c27981a86b4e2f#diff-1
• http://www.codseq.it/advisories/osclass_directory_traversal_vulnerability
• http://osclass.org/2012/03/05/osclass-2-3-6/
• http://www.securityfocus.com/bid/52336
• http://www.openwall.com/lists/oss-security/2012/04/02/6
• https://github.com/osclass/OSClass/commit/1e7626f4e1a26371480989c0b937f107ea9a6d4b
• http://www.openwall.com/lists/oss-security/2012/04/02/1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73754
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73755