CVE-2012-4878

NUCLEI

FlatnuX CMS 2011 08.09.2 - Path Traversal

Title source: llm

Description

Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Vulnerability Laboratory · textwebappsphp
https://www.exploit-db.com/exploits/37034

Nuclei Templates (1)

FlatnuX CMS - Directory Traversal
MEDIUMby daffainfo

References (4)

Scores

EPSS 0.0642
EPSS Percentile 91.1%

Details

CWE
CWE-22
Status published
Products (1)
flatnux/flatnux 2011-08-09-2
Published Sep 06, 2012
Tracked Since Feb 18, 2026