Description (CNA)
PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.phpsimplicity.com/scripts.php?id=3
- http://securitytracker.com/id?1014591
- http://secunia.com/advisories/16273
- http://rgod.altervista.org/simply.html
- http://www.securityfocus.com/bid/14424
ADP enrichment
No English description supplied.