CVE-2012-1226

🗓️ 21 Feb 2012 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 67 Views🌐 WEB

Vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code.

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2012-1226	10 Feb 201200:00	–	circl
Cvelist	CVE-2012-1226	21 Feb 201200:00	–	cvelist
Nuclei	Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities	27 Jun 202603:01	–	nuclei
NVD	CVE-2012-1226	21 Feb 201213:31	–	nvd
Prion	Directory traversal	21 Feb 201213:31	–	prion
Positive Technologies	PT-2012-3149 · Dolibarr · Dolibarr Cms	21 Feb 201200:00	–	ptsecurity

NVD

Node

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/73136
securityfocus	www.securityfocus.com/archive/1/521583
vulnerability-lab	www.vulnerability-lab.com/get_content.php
github	www.github.com/Dolibarr/dolibarr/commit/8f9b9987ffb42cfbe907fe31ded3001bfc1b3417
archives	www.archives.neohapsis.com/archives/bugtraq/2012-02/0168.html
github	www.github.com/Dolibarr/dolibarr/commit/5381986e50dd6055f2b3b63281eaacffa0449da2
exploit-db	www.exploit-db.com/exploits/18480

Parameter	Position	Path	Description	CWE
file	query param	document.php	Directory traversal via the file parameter may allow reading arbitrary files.	CWE-22
backtopage	query param	comm/action/fiche.php	Directory traversal via the backtopage parameter in create action may allow reading arbitrary files.	CWE-22

16 Jun 2026 23:39Current

7.8High risk

Vulners AI Score7.8

CVSS 27.5

EPSS0.251