CVE-2012-1207

Published: Feb 20, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter to frontend/js.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

51972

vdb-entry

x_refsource_BID

forkcms-js-file-include(73169)

vdb-entry

x_refsource_XF

http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released

x_refsource_CONFIRM

https://github.com/forkcms/forkcms/commit/a9986b86c53de0582248b39605660fbba0c21a29

x_refsource_CONFIRM

http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2012-1207

Description

Affected Products

References