medium5.0Public exploit code
CVE-2009-5112
wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebGlimpse 2.x - 'wgarcmin.cgi' Full Path Disclosure2012-03-18 · webapps · cgi · Verified
Impact
wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iwork | Webglimpse | through 2.18.7 Versions 1.7.6, 1.7.9, 2.0.03, 2.0.04, 2.0.07 |