NuytsTech Security

CVE-2007-0335

by ·

Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the languagepack parameter to (1) jax_petitionbook.php or (2) smileys.php.

Date published : 2007-01-17

http://www.securityfocus.com/bid/22072

http://www.securityfocus.com/archive/1/456981/100/0/threaded

Tags: