CVE-2012-4031: Wangkongbao Cns-1000

Medium severity, CVSS 5.0. EPSS: 52.3% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) langid cookie to port 85.

Affected products

• Wangkongbao Cns-1000: any version
• Wangkongbao Cns-1100: any version

Published 2012-07-17. Last modified 2026-06-16.