Unscored CVE-2009-2224 EUVD-2009-2220GHSA-376p-c8r5-gg6r

Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allows remote attackers …

Published Jun 26, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the g_lang parameter.

References

9013 exploit
35486 vdb-entry
20090626 false? AN Guestbook LFI mailing-list