Path traversal

2012-03-1918:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.9%

JSON

Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.

CPENameOperatorVersion
webgrindeq1.0

CPE	Name	Operator	Version
	webgrind	eq	1.0

References

packetstormsecurity.org/files/110216

www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php

code.google.com/p/webgrind/issues/detail?id=66

exchange.xforce.ibmcloud.com/vulnerabilities/73509

www.exploit-db.com/exploits/18523