CVE-2012-2905

Artiphp CMS 5.5.0 Neo - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-2905. PoCs published by LiquidWorm.

AI-analyzed exploit summary This exploit targets Artiphp CMS 5.5.0 by leveraging predictable database backup filenames to disclose sensitive information. It iterates through possible dates and backup types to locate and retrieve the backup file.

Description

Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request.

Exploits (1)

exploitdb WORKING POC VERIFIED
by LiquidWorm · textwebappsphp
https://www.exploit-db.com/exploits/18889

This exploit targets Artiphp CMS 5.5.0 by leveraging predictable database backup filenames to disclose sensitive information. It iterates through possible dates and backup types to locate and retrieve the backup file.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Artiphp CMS 5.5.0 Neo (r422)
No auth needed
Prerequisites: Network access to the target web server · Predictable backup file naming convention
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75690
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/81991
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49195
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/18889

Scores

EPSS 0.0311
EPSS Percentile 86.1%

Details

CWE
CWE-264
Status published
Products (1)
artiphp/artiphp_cms 5.5.0
Published May 21, 2012
Tracked Since Feb 18, 2026