Vulnerability Details : CVE-2012-5192

Exploit prediction scoring system (EPSS) score for CVE-2012-5192

Metasploit modules for CVE-2012-5192

• Bitweaver overlay_type Directory Traversal

  Disclosure Date: 2012-10-23

  First seen: 2020-04-26

  auxiliary/scanner/http/bitweaver_overlay_type_traversal

  This module exploits a directory traversal vulnerability found in Bitweaver. When handling the 'overlay_type' parameter, view_overlay.php fails to do any path checking/filtering, which can be abused to read any file outside the virtual directory. Authors:

  More information

CVSS scores for CVE-2012-5192

CWE ids for CVE-2012-5192

• CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
  The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
  Assigned by: nvd@nist.gov (Primary)

References for CVE-2012-5192

Products affected by CVE-2012-5192