CVE-2012-6500

2013-01-1202:00:00

mitre

www.cve.org

directory traversal

pragyan cms 3.0

remote attackers

arbitrary files

AI Score

6.7

Confidence

Low

EPSS

0.031

Percentile

91.2%

JSON

Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a … (dot dot) in the fileget parameter in a profile action to index.php.

References

www.exploit-db.com/exploits/18347

www.osvdb.org/82585

www.securityfocus.com/bid/51360