Unscored severity · published Apr 6, 2010
CVE-2010-1267
Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the com…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the com parameter to (1) cContactus.php, (2) cGuestbook.php, and (3) cArticle.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WC
Webmaid Cms · Kjetiltroan
through 0.2-6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1267
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1267
Exploit
http://inj3ct0r.com/exploits/11394
Exploit
http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt
Exploit
http://www.exploit-db.com/exploits/11831
Exploit
http://www.securityfocus.com/bid/38993
Vendor Advisory
http://www.vupen.com/english/advisories/2010/0674
More from Webmaid Cms
–
CVE-2010-1266
Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) template, (2)…