CVE-2012-1669

MEDIO 4.3CVE-2012-1669 · Published 17/11/2014 · updated 16/06/2026

In breve

CVE-2012-1669 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda phpmoneybooks (phpmoneybooks).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.5%, superiore al 89.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
phpmoneybooks phpmoneybooks	`≤ 1.0.2`	No fix yet

Description

Directory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter.

References

osvdb.org/80101
packetstormsecurity.com/files/111114/phpMoneyBooks-1.0.2-Local-File-Inclusion.html
seclists.org/fulldisclosure/2012/Mar/259
sourceforge.net/projects/phpmoneybooks/files/Changelog.TXT/download · Vendor Advisory
exploit-db.com/exploits/18648 · Exploit
securityfocus.com/archive/1/522058
securityfocus.com/bid/52532

Altre vulnerabilità di phpmoneybooks

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free