MitreCVE-2012-1839CVE-2012-1839
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
92.2%
Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the (1) pluginName or (2) pluginPath parameter in a get_template action. NOTE: some of these details are obtained from third party information.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ajaxplorer | ajaxplorer | 3.2 | cpe:2.3:a:ajaxplorer:ajaxplorer:3.2:*:*:*:*:*:*:* |
| ajaxplorer | ajaxplorer | 3.2.1 | cpe:2.3:a:ajaxplorer:ajaxplorer:3.2.1:*:*:*:*:*:*:* |
| ajaxplorer | ajaxplorer | 3.2.2 | cpe:2.3:a:ajaxplorer:ajaxplorer:3.2.2:*:*:*:*:*:*:* |
| ajaxplorer | ajaxplorer | 3.2.3 | cpe:2.3:a:ajaxplorer:ajaxplorer:3.2.3:*:*:*:*:*:*:* |
| ajaxplorer | ajaxplorer | 3.2.4 | cpe:2.3:a:ajaxplorer:ajaxplorer:3.2.4:*:*:*:*:*:*:* |
| ajaxplorer | ajaxplorer | 4.0 | cpe:2.3:a:ajaxplorer:ajaxplorer:4.0:*:*:*:*:*:*:* |
| ajaxplorer | ajaxplorer | 4.0.1 | cpe:2.3:a:ajaxplorer:ajaxplorer:4.0.1:*:*:*:*:*:*:* |
| ajaxplorer | ajaxplorer | 4.0.2 | cpe:2.3:a:ajaxplorer:ajaxplorer:4.0.2:*:*:*:*:*:*:* |
| ajaxplorer | ajaxplorer | 4.0.3 | cpe:2.3:a:ajaxplorer:ajaxplorer:4.0.3:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
92.2%