VIR Vulnerability Intelligence Relay

CVE-2009-5112

medium
Published 2012-03-19 · Modified 2026-04-29
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
6.0

Description

wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Exploits

Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.

Exploit-DB

EDB-36976 webapps cgi verified
Websecurity · 2012-03-18

WebGlimpse 2.x - 'wgarcmin.cgi' Full Path Disclosure

Source code queued for fetch — refresh in a moment.

Application impact
VendorProductVersionsFixed
iworkwebglimpse{"endIncluding":"2.18.7"}
iworkwebglimpse1.7.6
iworkwebglimpse1.7.9
iworkwebglimpse2.0.03
iworkwebglimpse2.0.04
iworkwebglimpse2.0.07
iworkwebglimpse2.0.10
iworkwebglimpse2.1.01
iworkwebglimpse2.1.04
iworkwebglimpse2.2.0
iworkwebglimpse2.2.2
iworkwebglimpse2.3.1
iworkwebglimpse2.4.3
iworkwebglimpse2.4.6
iworkwebglimpse2.5.1
iworkwebglimpse2.5.4
iworkwebglimpse2.6.7
iworkwebglimpse2.7.4
iworkwebglimpse2.7.6
iworkwebglimpse2.7.7
iworkwebglimpse2.8.0
iworkwebglimpse2.8.1
iworkwebglimpse2.10.2
iworkwebglimpse2.10.4
iworkwebglimpse2.10.5
iworkwebglimpse2.11.0
iworkwebglimpse2.12.0
iworkwebglimpse2.12.1
iworkwebglimpse2.12.2
iworkwebglimpse2.12.3
iworkwebglimpse2.13.0
iworkwebglimpse2.13.1
iworkwebglimpse2.13.2
iworkwebglimpse2.14.0
iworkwebglimpse2.14.1
iworkwebglimpse2.14.3
iworkwebglimpse2.14.6
iworkwebglimpse2.14.8
iworkwebglimpse2.15.2
iworkwebglimpse2.15.3
iworkwebglimpse2.16.1
iworkwebglimpse2.17.0
iworkwebglimpse2.17.2
iworkwebglimpse2.18.0
iworkwebglimpse2.18.2
iworkwebglimpse2.18.3
iworkwebglimpse2.18.4
iworkwebglimpse2.18.5

References

CWEs

CWE-200

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.