CVE-2012-4031 Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) langid cook...
MediumCVSS 5.0
EPSS 52.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) langid cookie to port 85.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wangkongbao cns-1000 | All versions | No fix listed |
| wangkongbao cns-1100 | All versions | No fix listed |
References
- 83636 vdb-entry
- 49776 third-party-advisory vendor-advisory
- 19526 exploit
- 54267 exploit vdb-entry
- wangkongbao-acloglogin-directory-traversal(76682) vdb-entry