medium6.4
CVE-2004-2255
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action vari…
Impact
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyfaq | Phpmyfaq | Version 1.3.12 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html
- http://secunia.com/advisories/11640
- http://securitytracker.com/id?1010190
- http://www.osvdb.org/6300
- http://www.phpmyfaq.de/advisory_2004-05-18.php
- http://www.securityfocus.com/bid/10374
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16177
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html
- http://secunia.com/advisories/11640
- http://securitytracker.com/id?1010190
- http://www.osvdb.org/6300
- http://www.phpmyfaq.de/advisory_2004-05-18.php
- http://www.securityfocus.com/bid/10374
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16177