medium5.0
CVE-2004-1426
Directory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to read arbitrary files and execute arbitrary PHP fil…
Impact
Directory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to read arbitrary files and execute arbitrary PHP files via .. (dot dot) sequences in the lng parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Korweblog | Korweblog | Versions 1.6.1, 1.6.2cvs |