Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-0996. PoCs published by High-Tech Bridge SA. A Nuclei detection template is also available.
AI-analyzed exploit summary The provided text describes a cross-site request-forgery (CSRF) and local file inclusion (LFI) vulnerability in 11in1 1.2.1. It includes a sample exploit URL demonstrating the LFI vulnerability but lacks executable code.
Description
Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.
Exploits (2)
The provided text describes a cross-site request-forgery (CSRF) and local file inclusion (LFI) vulnerability in 11in1 1.2.1. It includes a sample exploit URL demonstrating the LFI vulnerability but lacks executable code.
The provided text describes a local file inclusion (LFI) vulnerability in 11in1 1.2.1, allowing arbitrary file access via path traversal. It also mentions a cross-site request forgery (CSRF) issue but lacks executable exploit code.