Description (CNA)
Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (language) variable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.phpmyfaq.de/advisory_2004-05-18.php
- http://securitytracker.com/id?1010190
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html
- http://www.securityfocus.com/archive/1/363636
- http://secunia.com/advisories/11640
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16223
- http://www.securityfocus.com/bid/10377
ADP enrichment
No English description supplied.
- http://www.phpmyfaq.de/advisory_2004-05-18.php
- http://securitytracker.com/id?1010190
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html
- http://www.securityfocus.com/archive/1/363636
- http://secunia.com/advisories/11640
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16223
- http://www.securityfocus.com/bid/10377