NetSight
IP …
medium6.8Public exploit code

CVE-2012-1112

Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a ..

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the select_users_template parameter to index.php.

Affected products

VendorProductAffected versions
Open-RealtyOpen-Realty
through 2.5.8
Versions 2.3.1, 2.3.4

Weakness classification

CWE-22

References