cbcvebase.
CVE-2013-1224
published 2013-05-09

CVE-2013-1224: Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to…

high7.8CVSS 3.1
AVNACLAuNCNICAN
Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.

Affected

12 ranges
VendorProductVersion rangeFixed in
ciscounified_customer_voice_portal<= 9.0\(1\)
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal
ciscounified_customer_voice_portal