{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-02T15:22:45.588","vulnerabilities":[{"cve":{"id":"CVE-2012-0987","sourceIdentifier":"cve@mitre.org","published":"2012-10-06T21:55:03.707","lastModified":"2026-06-16T23:38:37.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the icmsConfigPlugins[sanitizer_plugins][] parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en edituser.php en ImpressCMS v1.2.x anterior a v1.2.7 Final y v1.3.x anterior a v1.3.1 Final permite a usuarios remotos autenticados incluir y ejecutar ficheros locales arbitrarios mediante un .. (punto punto) en el parámetro icmsConfigPlugins[sanitizer_plugins][]"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2:alpha1:*:*:*:*:*:*","matchCriteriaId":"D1562813-DF7E-44B4-B1A8-BA1D29EA36A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2:alpha2:*:*:*:*:*:*","matchCriteriaId":"E03BAC32-4EED-461D-9A3F-8950DDF9137B"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"10325A08-8E84-453E-AB40-FF77BEDDCE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2:final:*:*:*:*:*:*","matchCriteriaId":"866FCF80-E8F4-4A13-B4CB-85FABB7EFCBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"2D5B1D85-C58A-44C0-9F63-AA80F21F41A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"A6BBB64A-A7AF-42A5-9987-ADE774EB4450"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.1:beta:*:*:*:*:*:*","matchCriteriaId":"FC070D86-BA9D-4C59-8A9F-EAF6BC8AB69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.1:final:*:*:*:*:*:*","matchCriteriaId":"F316CCA3-CCE8-4035-B960-A15287BE23BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"977FACD8-32A3-4763-ABEC-A8500DA0EA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.3:beta:*:*:*:*:*:*","matchCriteriaId":"34A85AA9-8989-4D67-B64A-87D2A3589A10"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.3:final:*:*:*:*:*:*","matchCriteriaId":"F00634F3-707C-4C5E-AC49-87B472D83C19"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"680AD01C-40AF-4ABA-9214-059A72874FE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.3:rc2:*:*:*:*:*:*","matchCriteriaId":"E1C7FF42-9CD7-4692-9FA0-17B59D82D952"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.4:final:*:*:*:*:*:*","matchCriteriaId":"4DC5894E-9EFE-4858-9EC7-18E89B01A117"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.5:final:*:*:*:*:*:*","matchCriteriaId":"DA31879B-D41E-4E14-91CD-4511E4A8E34F"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.2.6:final:*:*:*:*:*:*","matchCriteriaId":"C80928E3-8A4A-4155-9F97-DF96BBA10F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:impresscms:impresscms:1.3:*:*:*:*:*:*:*","matchCriteriaId":"03CF5F6A-6B9D-4E10-B635-F02621110472"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-01/0022.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://community.impresscms.org/modules/smartsection/item.php?itemid=579","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/47448","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/78143","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/51268","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72146","source":"cve@mitre.org"},{"url":"https://www.htbridge.com/advisory/HTB23064","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2012-01/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://community.impresscms.org/modules/smartsection/item.php?itemid=579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/47448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/78143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/51268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.htbridge.com/advisory/HTB23064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}