CVE-2012-0996 Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/ind...
MediumCVSS 5.0
EPSS 8.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 11in1 | = 1.2.1-stable_12-31-2011 | No fix listed |
References
- www.htbridge.ch exploit