CVE-2012-0981: Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories...

Security readout for executives and security teams

phpShowtime 2.0 may let a remote user browse directories and image files outside the intended area through a path handling flaw. The sources do not provide a CVSS score, vendor fix, or evidence of active exploitation, so urgency depends on whether this old application is still exposed. Exposure is likely limited to organizations still running phpShowtime 2.0 with index.php reachable by untrusted users. Public internet exposure would raise concern because the weakness is remotely reachable, but the bundle lists no CPEs, deployment context, or maintained vendor advisory. Prioritize discovery first. If phpShowtime 2.0 is externally reachable, treat remediation as time-sensitive because public exploit information is referenced, even though active exploitation and severity are not confirmed in the bundle. Mitigation focus: Inventory and retire any phpShowtime 2.0 deployments if no longer required.; Check vendor or maintainer guidance for an official fix or supported replacement.; Restrict access to any remaining phpShowtime instance to trusted networks or users..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.