CVE-2012-1207
ForkCMS Directory Traversal vulnerability
EPSS 0.17%
Description
Directory traversal vulnerability in `frontend/core/engine/javascript.php` in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a `..` (dot dot) in the module parameter to `frontend/js.php`.
How to fix CVE-2012-1207
To remediate CVE-2012-1207, upgrade the affected package to a fixed version below.
- Packagist/forkcms/forkcms—upgrade to 3.2.5 or later
Is CVE-2012-1207 being exploited?
Low — EPSS is 0.2%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 3.2.5