CVE-2012-4920

Published: Apr 4, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in the zing_forum_output function in forum.php in the Zingiri Forum (aka Forums) plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter to index.php.

Affected (20)

Products: Zingiri: Forums

Zingiri

1 product

Forums

Configuration A

20 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zingiri Forums	Up to 1.4.3
Zingiri Forums	Version 1.0.0
Zingiri Forums	Version 1.0.1
Zingiri Forums	Version 1.0.2
Zingiri Forums	Version 1.0.3
Zingiri Forums	Version 1.0.4
Zingiri Forums	Version 1.0.5
Zingiri Forums	Version 1.0.6
Zingiri Forums	Version 1.0.7
Zingiri Forums	Version 1.0.8
Zingiri Forums	Version 1.0.9
Zingiri Forums	Version 1.1.0
Zingiri Forums	Version 1.1.1
Zingiri Forums	Version 1.2.0
Zingiri Forums	Version 1.2.1
Zingiri Forums	Version 1.3.0
Zingiri Forums	Version 1.3.1
Zingiri Forums	Version 1.4.0
Zingiri Forums	Version 1.4.1
Zingiri Forums	Version 1.4.2