Security Advisory
CVE-2004-2256
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (language) variable.