Lucene search

[email protected]CVE-2012-1112

HistorySep 06, 2012 - 6:55 p.m.

CVE-2012-1112

2012-09-0618:55:01

CWE-22

[email protected]

web.nvd.nist.gov

cve-2012-1112

directory traversal

open-realty cms

remote exploitation

nvd

security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.5%

JSON

Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the select_users_template parameter to index.php.

Affected configurations

NVD

Node

open-realtyopen-realtyRange≤2.5.8

open-realtyopen-realtyMatch2.3.1

open-realtyopen-realtyMatch2.3.4

CPENameOperatorVersion
open-realty:open-realtyopen-realtyle2.5.8
open-realty:open-realtyopen-realtyeq2.3.1
open-realty:open-realtyopen-realtyeq2.3.4

CPE	Name	Operator	Version
open-realty:open-realty	open-realty	le	2.5.8
open-realty:open-realty	open-realty	eq	2.3.1
open-realty:open-realty	open-realty	eq	2.3.4

References

archives.neohapsis.com/archives/bugtraq/2012-03/0012.html

www.openwall.com/lists/oss-security/2012/03/05/14

www.openwall.com/lists/oss-security/2012/03/05/23

www.securityfocus.com/bid/52296

yehg.net/lab/pr0js/advisories/%5Bopen-realty_2.5.8_2.x%5D_lfi

exchange.xforce.ibmcloud.com/vulnerabilities/73736

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.5%

JSON

Related for CVE-2012-1112

prion1 nvd1 cvelist1