CVE-2012-2919: Chevereto

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the v parameter.

Affected products

• Chevereto Chevereto: version 1.91 only

Published 2012-05-21. Last modified 2026-06-16.