medium5.0Public exploit code
CVE-2012-1790
Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- webgrind 1.0 - 'file' Local File Inclusion2012-02-25 · webapps · php · Verified
Impact
Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webgrind Project | Webgrind | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://code.google.com/p/webgrind/issues/detail?id=66
- http://packetstormsecurity.org/files/110216
- http://www.exploit-db.com/exploits/18523
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73509
- http://code.google.com/p/webgrind/issues/detail?id=66
- http://packetstormsecurity.org/files/110216
- http://www.exploit-db.com/exploits/18523
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73509