NVD

Id
45474  
Name
CVE-2012-3996  
Description
TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-07-12  
Modified Date
2012-10-24  
Seq
2012-3996  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228399 45474 CVE-2012-3996 20120704 [CVE-2012-0911] Tiki Wiki CMS Groupware <= 8.3 "unserialize()" PHP Code Execution  View
228400 45474 CVE-2012-3996 http://dev.tiki.org/item4109  View
228401 45474 CVE-2012-3996 http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS  View
228402 45474 CVE-2012-3996 http://info.tiki.org/article191-Tiki-Releases-8-4  View
228403 45474 CVE-2012-3996 19573  View
228404 45474 CVE-2012-3996 19630  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27365 JVNDB-2012-003072 TikiWiki CMS/Groupware におけるインストールパスを取得される脆弱性 TikiWiki CMS/Groupware には、インストールパスを取得される脆弱性が存在します。 CVE-2012-3996 57234 CVE-2012-3996 45474 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003072.html 2012-07-12 2012-07-17 View