Description
minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter.
References
- 1012911 vdb-entry
- 20050116 Minis directory traversal vulnerability mailing-list
- 13866 third-party-advisory
- minis-month-dos(18929) vdb-entry
- 20050116 Minis directory traversal vulnerability mailing-list