CVE-2012-0996

NUCLEI

11in1 1.2.1 - Path Traversal

Title source: llm

Description

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.

Exploits (2)

exploitdb WRITEUP VERIFIED

by High-Tech Bridge SA · textwebappsphp

https://www.exploit-db.com/exploits/36784

View Code ZIP pw:eip

exploitdb WRITEUP VERIFIED

by High-Tech Bridge SA · textwebappsphp

https://www.exploit-db.com/exploits/36785

View Code ZIP pw:eip

Nuclei Templates (1)

11in1 CMS 1.2.1 - Local File Inclusion (LFI)

MEDIUMby daffainfo

References (1)

[Exploit] https://www.htbridge.ch/advisory/HTB23071

Scores

EPSS 0.0299

EPSS Percentile 86.6%

Details

CWE

CWE-22

Status published

Products (1)

11in1/11in1 1.2.1 stable_12-31-2011

Published Feb 24, 2012

Tracked Since Feb 18, 2026