Description
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.
References
- http://www.phpmyfaq.de/advisory_2004-05-18.php
- 10374 vdb-entry
- 1010190 vdb-entry
- 20040518 Advisory 05/2004: phpMyFAQ local file inclusion vulnerability mailing-list
- phpmyfaq-file-include(16177) vdb-entry
- 6300 vdb-entry
- 11640 third-party-advisory