CVE-2012-2208

5 known exploits for CVE-2012-2208

Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.

Affected products: Piwigo
Piwigo: ≤ 2.3.3

Fix: Available
CVSS 2.0: 7.5 HIGH
EPSS: 9.4% (95th percentile)
Weakness: CWE-22
NVD status: Modified
Published: 2012-08-14

CVE-2012-2208 at NVD

Authoritative description, scoring and affected products

piwigo 2.3.3 - Multiple Vulnerabilities

2014-07-01 RootSEEBUG

Piwigo 2.3.3 Multiple Vulnerabilities

2012-04-26 High-Tech BridgeZDT

piwigo 2.3.3 - Multiple Vulnerabilities

2012-04-25 High-Tech Bridge SAEXPLOITPACK

piwigo 2.3.3 - Multiple Vulnerabilities

2012-04-25 High-Tech Bridge SAEXPLOITDB

Piwigo 2.3.3 Cross Site Scripting / Directory Traversal

2012-04-25 High-Tech Bridge SAPACKETSTORM