Security Advisory

CVE-2003-1542

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-02-13 23:00:00
Last updated 2024-09-16 22:25:43
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the fm_path parameter.