CVE-2012-5192 Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" (dot dot encoded slash) sequences in the overlay_t...
MediumCVSS 5.0
EPSS 52.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" (dot dot encoded slash) sequences in the overlay_type parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitweaver | <= 2.8.1 | No fix listed |
| bitweaver | = 1.1 | No fix listed |
| bitweaver | = 1.1.1_beta | No fix listed |
| bitweaver | = 1.2.1 | No fix listed |
| bitweaver | = 1.3 | No fix listed |
| bitweaver | = 1.3.1 | No fix listed |
| bitweaver | = 2.0.0 | No fix listed |
| bitweaver | = 2.0.2 | No fix listed |
| bitweaver | = 2.5 | No fix listed |
| bitweaver | = 2.6 | No fix listed |
| bitweaver | = 2.7 | No fix listed |
References
- www.trustwave.com exploit