CVE-2009-5112

Iwork Webglimpse < 2.18.7 - Information Disclosure

Title source: rule
STIX 2.1

Description

wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Websecurity · textwebappscgi
https://www.exploit-db.com/exploits/36976

References (2)

Core 2
Core References
Exploit x_refsource_misc
http://websecurity.com.ua/2628/
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/74320

Scores

EPSS 0.0203
EPSS Percentile 84.0%

Details

CWE
CWE-200
Status published
Products (48)
iwork/webglimpse 1.7.6
iwork/webglimpse 1.7.9
iwork/webglimpse 2.0.03
iwork/webglimpse 2.0.04
iwork/webglimpse 2.0.07
iwork/webglimpse 2.0.10
iwork/webglimpse 2.1.01
iwork/webglimpse 2.1.04
iwork/webglimpse 2.2.0
iwork/webglimpse 2.2.2
... and 38 more
Published Mar 19, 2012
Tracked Since Feb 18, 2026