CVE-2012-6522

EPSS 4.0%

Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/18348unverified cve_referencewww.exploit-db.com/exploits/18711unverified exploitdbwww.exploit-db.com/exploits/18711unverified exploitdbwww.exploit-db.com/exploits/18348unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/47527 https://exchange.xforce.ibmcloud.com/vulnerabilities/72302 http://www.exploit-db.com/exploits/18348 http://www.exploit-db.com/exploits/18711 http://www.osvdb.org/80974 http://www.securityfocus.com/bid/51359