CVE-2012-1671

Nicolas Tormo Phppaleo < 4.8b155 - Path Traversal

Title source: rule
STIX 2.1

Description

Directory traversal vulnerability in index.php in phpPaleo 4.8b155 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Mark Stanislav · textwebappsphp
https://www.exploit-db.com/exploits/18701

References (6)

Core 6
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/18701
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/80100
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48398
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/52530
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/03/16/3
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/03/15/11

Scores

EPSS 0.1144
EPSS Percentile 93.6%

Details

CWE
CWE-22
Status published
Products (1)
nicolas_tormo/phppaleo < 4.8b155
Published Oct 08, 2012
Tracked Since Feb 18, 2026