CVE-2012-2919

CVE-2012-2919 describes a directory traversal vulnerability in Chevereto 1.9.1, specifically within the Upload/engine.php component. An unauthenticated remote attacker can exploit this flaw by manipulating the 'v' parameter with dot-dot sequences to determine the existence of arbitrary files on the server. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, leading to potential information disclosure. While not listed on the KEV catalog or Hot List, public exploit code is available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.