PT-2005-2807
CVE-2005-1840
·
تاريخ النشر
2005-06-02
·
تاريخ التحديث
2016-10-18
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
phpCMS versions 1.2.x through 1.2.1pl1
Description
A directory traversal issue exists, allowing remote attackers to read or include arbitrary files. This can be achieved by using a .. (dot dot) in the
language parameter to "parser.php".Recommendations
For phpCMS versions 1.2.x through 1.2.1pl1, update to version 1.2.1pl2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾