Path traversal

2008-12-1518:00:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.7%

JSON

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter.

CPENameOperatorVersion
mini-pubeq0.3

CPE	Name	Operator	Version
	mini-pub	eq	0.3

References

securityreason.com/securityalert/4733

www.securityfocus.com/archive/1/487695/100/200/threaded

www.securityfocus.com/bid/27671

www.exploit-db.com/exploits/6733