CVE-2010-0799

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• phpunity.newsmanager - Local File Inclusion2010-01-30 · webapps · php · Verified

Impact

Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/62036
• http://packetstormsecurity.org/1001-exploits/phpunity-lfi.txt
• http://secunia.com/advisories/38409
• http://www.exploit-db.com/exploits/11290
• http://osvdb.org/62036
• http://packetstormsecurity.org/1001-exploits/phpunity-lfi.txt
• http://secunia.com/advisories/38409
• http://www.exploit-db.com/exploits/11290