Directory traversal

2007-09-2620:17:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.036 Low

EPSS

Percentile

91.7%

JSON

Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in an ACCEPT_FILE array parameter to modules.php.

References

osvdb.org/37335

secunia.com/advisories/26958

securityreason.com/securityalert/3169

www.securityfocus.com/archive/1/480578/100/0/threaded

www.securityfocus.com/bid/25806

www.waraxe.us/advisory-54.html

exchange.xforce.ibmcloud.com/vulnerabilities/36772