QwikSec

Security Database

CVE

CWE

Training

CVE-2012-2435

Published: May 27, 2012

Modified: Sep 16, 2024

PUBLISHED

Description

Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the captcha parameter to module.php, as demonstrated by cross-site request forgery (CSRF) attacks.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.htbridge.com/advisory/HTB23089

x_refsource_MISC

http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&revision=2440

x_refsource_CONFIRM

http://forums.pligg.com/downloads.php?do=file&id=15

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.