Description
Directory traversal vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to read arbitrary files via the $className variable.
References
- 19653 third-party-advisory
- pajax-pajaxcalldispatcher-dir-traversal(25860) vdb-entry
- 17519 vdb-entry
- 20060413 PAJAX Remote Code Injection and File Inclusion Vulnerability mailing-list
- 20060413 PAJAX Remote Code Injection and File Inclusion Vulnerability mailing-list
- 24862 vdb-entry
- ADV-2006-1353 vdb-entry
- http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php