CVE-2012-1790

EPSS 5.2%

Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.org/files/110216unverified cve_referencewww.exploit-db.com/exploits/18523unverified exploitdbwww.exploit-db.com/exploits/18523unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://code.google.com/p/webgrind/issues/detail?id=66 http://packetstormsecurity.org/files/110216 https://exchange.xforce.ibmcloud.com/vulnerabilities/73509 http://www.exploit-db.com/exploits/18523 http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php