Security Advisory

CVE-2009-3823

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-10-28 10:00:00
Last updated 2024-08-07 06:38:30
Assigner mitre
State PUBLISHED

Description

Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the GLOBALS[page] parameter.