NVD

Id
43229  
Name
CVE-2012-1226  
Description
Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the (1) file parameter to document.php or (2) backtopage parameter in a create action to comm/action/fiche.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-02-21  
Modified Date
2012-03-20  
Seq
2012-1226  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217639 43229 CVE-2012-1226 20120227 Re: Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities  View
217640 43229 CVE-2012-1226 18480  View
217641 43229 CVE-2012-1226 20120210 Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities  View
217642 43229 CVE-2012-1226 http://www.vulnerability-lab.com/get_content.php?id=428  View
217643 43229 CVE-2012-1226 dolibarr-multiple-file-include(73136)  View
217644 43229 CVE-2012-1226 https://github.com/Dolibarr/dolibarr/commit/5381986e50dd6055f2b3b63281eaacffa0449da2  View
217645 43229 CVE-2012-1226 https://github.com/Dolibarr/dolibarr/commit/8f9b9987ffb42cfbe907fe31ded3001bfc1b3417  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25823 JVNDB-2012-001530 Dolibarr CMS におけるディレクトリトラバーサルの脆弱性 Dolibarr CMS には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2012-1226 54464 CVE-2012-1226 43229 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001530.html 2012-02-21 2012-02-22 View