Логотип exploitDog
bind:CVE-2012-1497
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-1497

Количество 4

Количество 4

ubuntu логотип

CVE-2012-1497

почти 14 лет назад

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.

CVSS2: 4
EPSS: Низкий
nvd логотип

CVE-2012-1497

почти 14 лет назад

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.

CVSS2: 4
EPSS: Низкий
debian логотип

CVE-2012-1497

почти 14 лет назад

The default configuration of Movable Type before 4.38, 5.0x before 5.0 ...

CVSS2: 4
EPSS: Низкий
github логотип

GHSA-h855-xgmg-w8p2

больше 3 лет назад

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2012-1497

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.

CVSS2: 4
0%
Низкий
почти 14 лет назад
nvd логотип
CVE-2012-1497

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.

CVSS2: 4
0%
Низкий
почти 14 лет назад
debian логотип
CVE-2012-1497

The default configuration of Movable Type before 4.38, 5.0x before 5.0 ...

CVSS2: 4
0%
Низкий
почти 14 лет назад
github логотип
GHSA-h855-xgmg-w8p2

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.

0%
Низкий
больше 3 лет назад

Уязвимостей на страницу