Unrated severityNVD Advisory· Published Mar 22, 2012· Updated Jun 16, 2026
CVE-2012-1839
CVE-2012-1839
Description
Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) pluginName or (2) pluginPath parameter in a get_template action. NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:ajaxplorer:ajaxplorer:3.2:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:ajaxplorer:ajaxplorer:3.2:*:*:*:*:*:*:*
- cpe:2.3:a:ajaxplorer:ajaxplorer:3.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ajaxplorer:ajaxplorer:3.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ajaxplorer:ajaxplorer:3.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ajaxplorer:ajaxplorer:3.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ajaxplorer:ajaxplorer:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:ajaxplorer:ajaxplorer:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ajaxplorer:ajaxplorer:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ajaxplorer:ajaxplorer:4.0.3:*:*:*:*:*:*:*
- (no CPE)range: <3.2.5, <4.0.4
Patches
Vulnerability mechanics
References
6- ajaxplorer.info/ajaxplorer-4-0-4/nvdPatchVendor Advisory
- www.kb.cert.org/vuls/id/504019nvdPatchUS Government Resource
- secunia.com/advisories/48226nvdVendor Advisory
- www.osvdb.org/79810nvd
- www.securityfocus.com/bid/52298nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/73671nvd
News mentions
0No linked articles in our index yet.