CVE-2004-2256

Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (language) variable.

Date published : 2005-07-17

http://www.securityfocus.com/bid/10377

http://www.securityfocus.com/archive/1/363636