CVE-2011-4711
N/A
Published: December 8, 2011 at 07:00 PM UTC
Updated: June 16, 2026 at 11:35 PM UTC
1 product affected across 1 vendorNamazu
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) result parameter.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 2.0.160.1.00.1.10.1.20.1.30.1.40.2.00.2.10.2.20.3.00.3.10.3.20.3.31.0.01.0.11.0.21.0.31.0.41.0.4a1.0.4b1.1.01.1.0a1.1.11.1.1.11.1.1.21.1.1.31.1.1.41.1.1.51.1.21.1.2.11.1.2.21.1.2.31.1.2.41.1.2.51.2.01.2.0.11.2.0.21.2.0.31.2.0.41.2.0.5 beta21.2.1.0 beta101.2.1.0 beta111.2.1.0 beta121.2.1.0 beta131.2.1.0 beta51.2.1.0 beta61.2.1.0 beta71.2.1.0 beta81.2.1.0 beta91.3.0.01.3.0.0 beta11.3.0.0 beta101.3.0.0 beta111.3.0.0 beta121.3.0.0 beta131.3.0.0 beta21.3.0.0 beta31.3.0.0 beta41.3.0.0 beta51.3.0.0 beta61.3.0.0 beta71.3.0.0 beta81.3.0.0 beta91.3.0.11.3.0.1 beta11.3.0.21.3.1.0 alpha11.3.1.0 alpha101.3.1.0 alpha111.3.1.0 alpha21.3.1.0 alpha31.3.1.0 alpha41.3.1.0 alpha51.3.1.0 alpha61.3.1.0 alpha71.3.1.0 alpha81.3.1.0 alpha91.4.0.0 alpha11.4.0.0 alpha21.4.0.0 alpha31.4.0.0 alpha41.4.0.0 alpha51.4.0.0 alpha61.4.0.0 alpha71.4.0.0 beta11.4.0.0 beta21.4.0.0 beta31.4.0.0 beta41.4.0.0 beta51.4.0.0 beta61.4.0.0 beta71.4.0.0 beta82.02.0.12.0.102.0.10 rc12.0.10 rc22.0.112.0.11 pre12.0.11 pre22.0.11 pre32.0.11 pre42.0.122.0.132.0.13 pre32.0.13 pre42.0.13 pre52.0.13 pre62.0.13 pre72.0.13 pre82.0.13 rc12.0.13 rc22.0.13 rc32.0.13 rc42.0.152.0.15 pre12.0.15 pre22.0.15 pre32.0.15 pre42.0.15 rc12.0.15 rc22.0.15 rc32.0.15 rc42.0.15 rc52.0.16 rc22.0.22.0.32.0.42.0.52.0.62.0.6 pre12.0.6 pre22.0.6 pre32.0.6 rc12.0.6 rc22.0.6 rc32.0.6 rc42.0.6 rc52.0.6 rc62.0.6 rc72.0.72.0.7 pre12.0.7 pre22.0.7 pre32.0.82.0.8 pre12.0.92.0.9 rc1rc3
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (2)
VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/71489Quick Info
StatusMODIFIED
CWE
CWE-22
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card