Directory traversal

2009-02-1007:00:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.2%

JSON

Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the (1) Contact_Plus and (2) Reviews modules, and (3) the module_name parameter to admin/includes/FANCYNLOptions.php in the Fancy_NewsLetter module.

CPENameOperatorVersion
aja_portaleq1.2

CPE	Name	Operator	Version
	aja_portal	eq	1.2

References

osvdb.org/51708

osvdb.org/51709

secunia.com/advisories/33735

www.securityfocus.com/bid/33565

www.exploit-db.com/exploits/7939