ByteOS Network

NVD Vulnerability Details :

CVE-2012-2227

Deferred

Source-cve@mitre.org

Published At-26 Aug, 2012 | 18:55

Updated At-11 Apr, 2025 | 00:51

Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the default_lang parameter.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

pluxml>>pluxml>>Versions up to 5.1.5(inclusive)

cpe:2.3:a:pluxml:pluxml:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-22	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://archives.neohapsis.com/archives/bugtraq/2012-05/0011.html	cve@mitre.org	N/A
http://osvdb.org/81638	cve@mitre.org	N/A
http://secunia.com/advisories/49026	cve@mitre.org	Vendor Advisory
http://telechargements.pluxml.org/changelog	cve@mitre.org	N/A
http://www.exploit-db.com/exploits/18828	cve@mitre.org	Exploit
http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6	cve@mitre.org	N/A
http://www.securityfocus.com/bid/53348	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/75330	cve@mitre.org	N/A
https://www.htbridge.com/advisory/HTB23086	cve@mitre.org	N/A
http://archives.neohapsis.com/archives/bugtraq/2012-05/0011.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/81638	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/49026	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://telechargements.pluxml.org/changelog	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.exploit-db.com/exploits/18828	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/53348	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/75330	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.htbridge.com/advisory/HTB23086	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History