CVE-2012-6665

Name of the Vulnerable Software and Affected Versions phpMoneyBooks version 1.0.4

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by including a .. (dot dot) in the file parameter of the index.php file.

Recommendations For phpMoneyBooks version 1.0.4, consider restricting access to the index.php file until a patch is available, or apply any available configuration changes to limit the impact of the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.