CVE-2008-1512 (Module XS) [Sitemap] - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

PDA

View Full Version : CVE-2008-1512 (Module XS)


Heap
26-03-08, 18:43
Directory traversal vulnerability in admin/admin_xs.php in phpBB Module XS 2.3.1 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the phpEx parameter.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1512)