CVE-2013-7091

Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter. NOTE: this can be leveraged to execute arbitrary code by obtaining LDAP credentials and accessing the service/admin/soap API.

• CWE-22

• http://osvdb.org/100747
• http://packetstormsecurity.com/files/124321
• http://www.exploit-db.com/exploits/30085Exploit
• http://www.exploit-db.com/exploits/30472
• http://www.securityfocus.com/bid/64149
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89527
• http://osvdb.org/100747
• http://packetstormsecurity.com/files/124321
• http://www.exploit-db.com/exploits/30085Exploit
• http://www.exploit-db.com/exploits/30472
• http://www.securityfocus.com/bid/64149
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89527

Published

Dec 13, 2013

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-7082Cross-site scripting (XSS) vulnerability in the errorAction …
• CVE-2013-7085Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled,…
• CVE-2013-7086The message function in lib/webbynode/notify.rb in the Webby…
• CVE-2013-7087ClamAV before 0.97.7 has WWPack corrupt heap memory9.8
• CVE-2013-7088ClamAV before 0.97.7 has buffer overflow in the libclamav co…9.8
• CVE-2013-7089ClamAV before 0.97.7: dbg_printhex possible information leak7.5
• CVE-2013-7092Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc…
• CVE-2013-7093SAP Network Interface Router (SAProuter) 39.3 SP4 allows rem…
• CVE-2013-7094SQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS f…
• CVE-2013-7095The XML parser (crm_flex_data) in SAP Customer Relationship …
• CVE-2013-7096Multiple SQL injection vulnerabilities in SAP EMR Unwired al…
• CVE-2013-7097Directory traversal vulnerability in 7 Media Web Solutions e…