CVE-2010-1110

2010-03-2517:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

69.9%

JSON

Directory traversal vulnerability in index.php in phpMySport 1.4 allows remote attackers to list arbitrary directories via a … (dot dot) in the current_folder parameter.

References

packetstormsecurity.org/1001-exploits/phpmysport-sqlaccess.txt

phpmysport.sourceforge.net/en/forum/bugs/sujet_2851.html

www.securityfocus.com/bid/37856

exchange.xforce.ibmcloud.com/vulnerabilities/55763