Unscored CVE-2008-0156 EUVD-2008-0169GHSA-79q7-7hwr-qj8f

Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via enco…

Published Jan 9, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbitrary files via encoded "/" (%2F) sequences in the link parameter.

References

3524 third-party-advisory
milliondollarscript-index-dir-traversal(39492) vdb-entry
27174 vdb-entry
20080107 Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability. mailing-list