What is CVE-2012-0996?

CVE-2012-0996 is a vulnerability in 11in1, classified under Path Traversal. Published 2012-02-24.

Is CVE-2012-0996 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in 11in1

CVE-2012-0996

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.098 (95.0th percentile) — read the EPSS interpretation.

Affected products

11in1 — versions 1.2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

20142995/nuclei-templates
ARPSyndicate/kenzer-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2012-0996?: CVE-2012-0996 is a vulnerability in 11in1, classified under Path Traversal. Published 2012-02-24.
Is CVE-2012-0996 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.