CVE-2012-4920

CVE-2012-4920 affects the WordPress Zingiri Forum plugin (Zingiri Forum) prior to 1.4.4. The vulnerability is in the forum.php function zing_forum_output, allowing a crafted url parameter to trigger a directory traversal via .. in index.php, enabling remote attackers to read arbitrary files. Impa...