Description
Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (language) variable.
References
- http://www.phpmyfaq.de/advisory_2004-05-18.php
- 1010190 vdb-entry
- 20040518 Advisory 05/2004: phpMyFAQ local file inclusion vulnerability mailing-list
- 20040518 Advisory 05/2004: phpMyFAQ local file inclusion vulnerability mailing-list
- 11640 third-party-advisory
- phpmyfaq-lang-directory-traversal(16223) vdb-entry
- 10377 vdb-entry