NetSight
high7.5Public exploit code

CVE-2012-4997

Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary local files via a ..

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter.

Affected products

VendorProductAffected versions
AnecmsAnecms
All versions
Version 2e2c583

Weakness classification

References