CVE-2012-10061
NONE—CVSS v3
—CVSS v2
55.63%
EPSS (exploit probability)
CWE-22CWE
Description
Sockso Music Host Server versions <= 1.5 are vulnerable to a path traversal flaw that allows unauthenticated remote attackers to read arbitrary files from the server’s filesystem. The vulnerability exists in the HTTP interface on port 4444, where the endpoint /file/ fails to properly sanitize user-supplied input. Attackers can traverse directories and access sensitive files outside the intended web root.
Affected routers (0)
No routers currently mapped to this CVE in our database.