Lucene search
HistoryJul 17, 2012 - 9:55 p.m.
CVE-2012-4031
cve
2012
4031
directory traversal
vulnerability
wangkongbao
cns-1000
cns-1100
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.22 Low
EPSS
Percentile
96.5%
Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a … (dot dot) in the (1) lang or (2) langid cookie to port 85.
Affected configurations
Node
wangkongbaocns-1000
ORwangkongbaocns-1100
| CPE | Name | Operator | Version |
|---|---|---|---|
| wangkongbao:cns-1000 | wangkongbao cns-1000 | eq | * |
| wangkongbao:cns-1100 | wangkongbao cns-1100 | eq | * |
Related
cvelist
cvelist
CVE-2012-4031
2012-07-17 21:00:00
prion
prion
Directory traversal
2012-07-17 21:55:00
nvd
nvd
CVE-2012-4031
2012-07-17 21:55:02
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.22 Low
EPSS
Percentile
96.5%
Related for CVE-2012-4031