Lucene search
MitreCVELIST:CVE-2018-12909HistoryOct 03, 2022 - 4:22 p.m.
CVE-2018-12909
2022-10-0316:22:07
mitre
www.cve.org
webgrind 1.5
vulnerability
unauthorized file access
file viewer
filesystem
webserver user access
0.006 Low
EPSS
Percentile
77.8%
Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment.
References
Related
nvd
nvd
CVE-2018-12909
2018-06-27 16:29:00
nuclei
nuclei
Webgrind <= 1.5 - Local File Inclusion
2023-08-05 07:29:56
prion
prion
Input validation
2018-06-27 16:29:00
cve
cve
CVE-2018-12909
2022-10-03 16:22:07