CVE-2012-2227

Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F…

published August 26, 2012

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the default_lang parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09775 · 95.5th percentile
Published
2012-08-26T18:00Z
EPSS history
Timeline
  • 26 AUG 18:00Z
    Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F…
    cvelistv5