Description
Directory traversal vulnerability in pawfaliki.php in Pawfaliki 0.5.1 allows remote attackers to list arbitrary files via a .. (dot dot) in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- pawfaliki-pawfaliki-directory-traversal(36454) vdb-entry
- 38417 vdb-entry
- 25553 vdb-entry
- 26702 third-party-advisory