Lucene search

[email protected]NVD:CVE-2012-2435

HistoryMay 27, 2012 - 8:55 p.m.

CVE-2012-2435

2012-05-2720:55:01

CWE-22

[email protected]

web.nvd.nist.gov

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.1%

JSON

Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a … (dot dot) in the captcha parameter to module.php, as demonstrated by cross-site request forgery (CSRF) attacks.

Affected configurations

NVD

Node

pliggpligg_cms

pliggpligg_cmsRange≤1.2.1

pliggpligg_cmsMatch1.0.0

pliggpligg_cmsMatch1.0.0rc1

pliggpligg_cmsMatch1.0.0rc2

pliggpligg_cmsMatch1.0.0rc3

pliggpligg_cmsMatch1.0.0rc4

pliggpligg_cmsMatch1.0.0rc5

pliggpligg_cmsMatch1.0.1

pliggpligg_cmsMatch1.0.2

pliggpligg_cmsMatch1.0.3

pliggpligg_cmsMatch1.0.4

pliggpligg_cmsMatch1.1.0

pliggpligg_cmsMatch1.1.2

pliggpligg_cmsMatch1.1.3

pliggpligg_cmsMatch1.1.4

pliggpligg_cmsMatch1.1.5

pliggpligg_cmsMatch1.2.0

pliggpligg_cmsMatch9.5

pliggpligg_cmsMatch9.9

pliggpligg_cmsMatch9.9.0

pliggpligg_cmsMatch9.9.0beta

pliggpligg_cmsMatch9.9.5

pliggpligg_cmsMatch9.9.5beta

References

forums.pligg.com/downloads.php?do=file&id=15

pligg.svn.sourceforge.net/viewvc/pligg?view=revision&revision=2440

www.htbridge.com/advisory/HTB23089

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.1%

JSON

Related for NVD:CVE-2012-2435

prion1 cve1 cvelist1 packetstorm1 securityvulns2 htbridge1