CVE-2012-1617: Juan Ramon Osclass

Medium severity, CVSS 6.4. EPSS: 9.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files.

Affected products

• Juan Ramon Osclass: up to and including 2.3.5; version 1.1 only; version 1.2 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; …

Published 2012-09-26. Last modified 2026-06-16.