Unrated severityNVD Advisory· Published Aug 31, 2012· Updated Jun 16, 2026

CVE-2011-5141

Description

Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the module parameter in an export_page action.

Affected products

Obm/Open Business Management
cpe:2.3:a:obm:open_business_management:*:rc13:*:*:*:*:*:*
Range: <=2.4.0
Open Business Management/OBMllm-fuzzy
Range: <=2.4.0-rc13

Patches

Vulnerability mechanics

References

osvdb.org/78003nvdExploit
www.htbridge.ch/advisory/multiple_vulnerabilities_in_obm.htmlnvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/71921nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000