CVE-2012-5242: Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote...

Security readout for executives and security teams

Banana Dance B.2.6 and earlier has a directory traversal flaw that can let a remote attacker make the application include and execute local files. If this legacy software is still internet-facing, compromise risk is serious. The supplied sources do not show CISA KEV listing or confirmed active exploitation. Exposure is limited to systems running Banana Dance B.2.6 or earlier, especially where functions/suggest.php is reachable remotely. This is likely a legacy-software issue; confirm through asset inventory, web roots, and application fingerprints. Prioritize quickly if any Banana Dance instance is public-facing or business-critical. The issue is old and likely uncommon, but a reachable vulnerable copy could expose the organization to remote compromise. Mitigation focus: Identify and remove internet exposure for Banana Dance B.2.6 or earlier.; Check vendor or advisory guidance for a fixed release or supported replacement.; If no supported fix exists, isolate or retire the application..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.