Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter in a get_template action.
References
| Link | Resource |
|---|---|
| http://www.exploit-db.com/exploits/23573 | Exploit |
| https://www.htbridge.com/advisory/HTB23118 | Exploit |
| http://www.exploit-db.com/exploits/23573 | Exploit |
| https://www.htbridge.com/advisory/HTB23118 | Exploit |
Configurations
History
21 Nov 2024, 01:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.exploit-db.com/exploits/23573 - Exploit | |
| References | () https://www.htbridge.com/advisory/HTB23118 - Exploit |
Information
Published : 2014-10-21 14:55
Updated : 2024-11-21 01:44
NVD link : CVE-2012-5242
Mitre link : CVE-2012-5242
CVE.ORG link : CVE-2012-5242
JSON object : View
Products Affected
bananadance
- banana_dance
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')