Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.
References
| Link | Resource |
|---|---|
| http://code.google.com/p/webgrind/issues/detail?id=66 | Third Party Advisory |
| http://packetstormsecurity.org/files/110216 | Exploit |
| http://www.exploit-db.com/exploits/18523 | Exploit Third Party Advisory VDB Entry |
| http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php | Exploit Third Party Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/73509 | VDB Entry |
| http://code.google.com/p/webgrind/issues/detail?id=66 | Third Party Advisory |
| http://packetstormsecurity.org/files/110216 | Exploit |
| http://www.exploit-db.com/exploits/18523 | Exploit Third Party Advisory VDB Entry |
| http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php | Exploit Third Party Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/73509 | VDB Entry |
Configurations
History
21 Nov 2024, 01:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://code.google.com/p/webgrind/issues/detail?id=66 - Third Party Advisory | |
| References | () http://packetstormsecurity.org/files/110216 - Exploit | |
| References | () http://www.exploit-db.com/exploits/18523 - Exploit, Third Party Advisory, VDB Entry | |
| References | () http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php - Exploit, Third Party Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/73509 - VDB Entry |
Information
Published : 2012-03-19 18:55
Updated : 2024-11-21 01:37
NVD link : CVE-2012-1790
Mitre link : CVE-2012-1790
CVE.ORG link : CVE-2012-1790
JSON object : View
Products Affected
webgrind_project
- webgrind
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')