CVE-2010-1652

2010-05-03T13:51:00
ID CVE-2010-1652
Type cve
Reporter cve@mitre.org
Modified 2010-05-03T15:30:00

Description

Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the file parameter to module.php. NOTE: some of these details are obtained from third party information.