phpMyFAQ Lang Parameter Directory Traversal Vulnerability
BID:10377
Info
phpMyFAQ Lang Parameter Directory Traversal Vulnerability
| Bugtraq ID: | 10377 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 18 2004 12:00AM |
| Updated: | May 18 2004 12:00AM |
| Credit: | Discovery is credited to Stefan Esser <[email protected]>. |
| Vulnerable: |
phpMyFAQ phpMyFAQ 1.4 -alpha 1 |
| Not Vulnerable: |
phpMyFAQ phpMyFAQ 1.4 -alpha 2 |
Discussion
phpMyFAQ Lang Parameter Directory Traversal Vulnerability
phpMyFAQ is prone to a directory traversal vulnerability. The issue occurs if a remote attacker sends a request for a file containing directory traversal character sequences to the application. If successful, the attacker can access arbitrary files on a vulnerable computer in the context of the affected server.
phpMyFAQ 1.4.0-alpha1 is prone to this issue.
phpMyFAQ is prone to a directory traversal vulnerability. The issue occurs if a remote attacker sends a request for a file containing directory traversal character sequences to the application. If successful, the attacker can access arbitrary files on a vulnerable computer in the context of the affected server.
phpMyFAQ 1.4.0-alpha1 is prone to this issue.
Exploit / POC
phpMyFAQ Lang Parameter Directory Traversal Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
phpMyFAQ Lang Parameter Directory Traversal Vulnerability
Solution:
phpMyFAQ 1.4.0-alpha2 is availabe to address this issue:
phpMyFAQ phpMyFAQ 1.4 -alpha 1
Solution:
phpMyFAQ 1.4.0-alpha2 is availabe to address this issue:
phpMyFAQ phpMyFAQ 1.4 -alpha 1
-
phpMyFAQ phpMyFAQ 1.4.0-alpha2
http://www.phpmyfaq.de/getfaq.php?number=1.4.0&version=alpha2
References
phpMyFAQ Lang Parameter Directory Traversal Vulnerability
References:
References:
- phpMyFAQ Homepage (phpMyFAQ)
- Advisory 05/2004: phpMyFAQ local file inclusion vulnerability (Stefan Esser