Unscored CVE-2006-5437 EUVD-2006-5422GHSA-cxq3-92v8-cjw8

Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in t…

Published Oct 20, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the phpAds_config[language] parameter. NOTE: this issue could not be reproduced by a third party

References

phpadsnew-upgrade-file-include(29640) vdb-entry
20061017 phpAdsNew include bug! mailing-list
20061018 Re: phpAdsNew include bug! mailing-list