CVE-2012-1790

2012-03-1918:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.9%

JSON

Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.

References

code.google.com/p/webgrind/issues/detail?id=66

packetstormsecurity.org/files/110216

www.exploit-db.com/exploits/18523

www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php

exchange.xforce.ibmcloud.com/vulnerabilities/73509