Description
Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter. NOTE: CVE disputes this vulnerability because l is validated by ctype_alpha before use
References
- 2875 exploit
- ADV-2006-4823 vdb-entry
- wikyblog-wbmap-file-include(30650) vdb-entry