Unscored CVE-2002-1515 EUVD-2002-1498GHSA-7p4w-3rj9-c96j

Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequ…

Published Mar 18, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.

References

http://www.coolforum.net/index.php?p=dlcoolforum
20021012 CoolForum v 0.5 beta shows content of PHP files mailing-list
20021001 [VulnWatch] CoolForum v 0.5 beta shows content of PHP files mailing-list
5973 vdb-entry
coolforum-avatar-view-php(10237) vdb-entry