CVE-2012-1790: Path Traversal
Published Mar 19, 2012
·Updated
Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.
Affected Software
1 affected component
Webgrind Project Webgrind=1.0
Event History
Mar 19, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1790?
The severity of CVE-2012-1790 is classified as medium with a score of 5.
2
How do I fix CVE-2012-1790?
To fix CVE-2012-1790, update to Webgrind version 1.0.3 or later which addresses the path traversal vulnerability.
3
What does CVE-2012-1790 affect?
CVE-2012-1790 affects Webgrind versions 1.0 and 1.0.2 by allowing unauthorized file access through absolute path traversal.
4
Can CVE-2012-1790 be exploited remotely?
Yes, CVE-2012-1790 can be exploited remotely by attackers who can manipulate the file parameter in index.php.
5
What is the potential impact of exploiting CVE-2012-1790?
Exploiting CVE-2012-1790 can allow attackers to read arbitrary files on the server, potentially exposing sensitive information.