CVE-2012-1226: Path Traversal
Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the (1) file parameter to document.php or (2) backtopage parameter in a create action to comm/action/fiche.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1226?
CVE-2012-1226 is considered to be of medium severity due to its potential for data exposure and malicious file access.
How do I fix CVE-2012-1226?
To fix CVE-2012-1226, upgrade Dolibarr CMS to a patched version that resolves the directory traversal vulnerabilities.
What applications are affected by CVE-2012-1226?
CVE-2012-1226 affects Dolibarr CMS version 3.2.0 Alpha.
What are the implications of CVE-2012-1226?
The implications of CVE-2012-1226 include unauthorized access to sensitive files and possible execution of arbitrary code.
Can CVE-2012-1226 be exploited remotely?
Yes, CVE-2012-1226 can be exploited remotely by attackers using specially crafted URL parameters.