Description
Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) layerstyle parameter to adlayer.php or (2) language parameter to js-form.php.
References
- 16469 third-party-advisory
- 20050817 [PHPADSNEW-SA-2005-001] phpAdsNew and phpPgAds 2.0.6 fix multiple vulnerabilities mailing-list
- http://www.securityreason.com/adv/phpAdsnew.SR.16.asc
- 14584 vdb-entry
- phppgads-multiple-file-include(21880) vdb-entry