CVE-2012-1790

Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.

• CWE-22

• http://code.google.com/p/webgrind/issues/detail?id=66Third Party Advisory
• http://packetstormsecurity.org/files/110216Exploit
• http://www.exploit-db.com/exploits/18523Exploit, Third Party Advisory, VDB Entry
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.phpExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73509VDB Entry
• http://code.google.com/p/webgrind/issues/detail?id=66Third Party Advisory
• http://packetstormsecurity.org/files/110216Exploit
• http://www.exploit-db.com/exploits/18523Exploit, Third Party Advisory, VDB Entry
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5075.phpExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73509VDB Entry

Published

Mar 19, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1784SQL injection vulnerability in MyJobList 0.1.3 allows remote…
• CVE-2012-1785kg_callffmpeg.php in the Video Embed & Thumbnail Generator p…
• CVE-2012-1786The Media Upload form in the Video Embed & Thumbnail Generat…
• CVE-2012-1787Multiple cross-site scripting (XSS) vulnerabilities in wgarc…
• CVE-2012-1788Multiple cross-site scripting (XSS) vulnerabilities in wonde…
• CVE-2012-1789Multiple cross-site scripting (XSS) vulnerabilities in Kongr…
• CVE-2012-1792Cross-site scripting (XSS) vulnerability in osCommerce/OM/Co…
• CVE-2012-1795webglimpse.cgi in Webglimpse before 2.20.0 allows remote att…
• CVE-2012-1796Unspecified vulnerability in IBM Tivoli Monitoring Agent (IT…
• CVE-2012-1797IBM DB2 9.5 uses world-writable permissions for nodes.reg, w…
• CVE-2012-1798The TIFFGetEXIFProperties function in coders/tiff.c in Image…6.5
• CVE-2012-1799The web server on the Siemens Scalance S Security Module fir…