CVE-2012-1226
NUCLEIDolibarr CMS 3.2.0 Alpha - Path Traversal & Arbitrary File Read via Document.php or Backtopage Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-1226. PoCs published by Benjamin Kunz Mejri, Vulnerability-Lab. A Nuclei detection template is also available.
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in Dolibarr 3.2.0 Alpha, allowing attackers to access sensitive files via unsanitized input in the 'file' parameter. No actual exploit code is included, only a description and example URL.
Description
Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the (1) file parameter to document.php or (2) backtopage parameter in a create action to comm/action/fiche.php.
Exploits (2)
The provided text describes a directory traversal vulnerability in Dolibarr 3.2.0 Alpha, allowing attackers to access sensitive files via unsanitized input in the 'file' parameter. No actual exploit code is included, only a description and example URL.
The document describes a file include vulnerability in Dolibarr CMS v3.2.0 Alpha, allowing remote attackers to include local files via manipulated parameters. No actual exploit code is provided, only URLs demonstrating the vulnerability.
Nuclei Templates (1)
http.favicon.hash:440258421
icon_hash=440258421