medium5.0Public exploit code
CVE-2012-1025
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) - Remote File Disclosure2012-01-09 · webapps · linux
Impact
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dream-Multimedia-Tv | Enigma2 Webinterface | Versions 1.6, 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4 |