Skip to content
OpenAdvisories
Unscored CVE-2005-2686 EUVD-2005-2687GHSA-x2mc-6874-8wp4

Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP p…

Published Aug 24, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via ".." sequences in the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.

References