Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-06-27T16:00:00Z

Updated: 2024-09-17T00:42:15.428Z

Reserved: 2018-06-27T00:00:00Z

Link: CVE-2018-12909

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-06-27T16:29:00.300

Modified: 2024-11-21T03:46:05.080

Link: CVE-2018-12909

cve-icon Redhat

No data.