medium6.8Public exploit code
CVE-2012-5242
Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute arbitrary local fil…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- banana dance b.2.6 - Multiple Vulnerabilities2012-12-21 · webapps · php · Verified
Impact
Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter in a get_template action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bananadance | Banana Dance | through b.2.6 |