CVE-2012-0996 PoC — 11in1 跨站请求伪造漏洞和本地文件包含漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0996.yaml

Associated Vulnerability

Title:11in1 跨站请求伪造漏洞和本地文件包含漏洞 (CVE-2012-0996)
Description:Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.

Description

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →