CVE-2012-6512 Organizer <= 1.2.1 - Path Disclosure
MediumCVSS 5.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Organizer plugin 1.2.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors to (1) plugin_hook.php, (2) page/index.php, (3) page/dir.php (4) page/options.php, (5) page/resize.php, (6) page/upload.php, (7) page/users.php, or (8) page/view.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| organizer project organizer | <= 1.2.1 | No fix listed |
| wordpress organizer(WordPress) | <= 1.2.1 | No fix listed |
References
- packetstormsecurity.org exploit third-party-advisory vdb-entry
- websecurity.com.ua exploit third-party-advisory
- organizer-multiple-path-disclosure(75107) third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org