Unrated severityNVD Advisory· Published Dec 15, 2011· Updated Apr 29, 2026
CVE-2011-4832
CVE-2011-4832
Description
Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter in a template action.
Affected products
4- cpe:2.3:a:caupo:cauposhop_classic:3.01:*:*:*:*:*:*:*
cpe:2.3:a:caupo:cauposhop_pro:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:caupo:cauposhop_pro:*:*:*:*:*:*:*:*range: <=3.70
- cpe:2.3:a:caupo:cauposhop_pro:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:caupo:cauposhop_pro:2.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.exploit-db.com/exploits/18066nvdExploit
- www.securityfocus.com/bid/50530nvdExploit
- secunia.com/advisories/46704nvdVendor Advisory
- www.osvdb.org/76871nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/71136nvd
News mentions
0No linked articles in our index yet.