Vulnerabilities > Webgrind Project > Webgrind

DATE CVE VULNERABILITY TITLE RISK
2018-06-27 CVE-2018-12909 Path Traversal vulnerability in Webgrind Project Webgrind 1.5.0
Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI.
network
low complexity
webgrind-project CWE-22
7.5
2012-03-19 CVE-2012-1790 Path Traversal vulnerability in Webgrind Project Webgrind 1.0
Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.
network
low complexity
webgrind-project CWE-22
5.0