VULNERABILITY INTELLIGENCE

CVE-2012-2435

CVSS score6.5 MEDIUM

EPSS probability1.55%

CISA KEVNot currently listed

Published2012-05-27

Last modified2026-06-16

Description

Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the captcha parameter to module.php, as demonstrated by cross-site request forgery (CSRF) attacks.