Directory traversal

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filepath parameter...

CVE-2010-4801: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filepath parameter...

PT-2011-1749

Name of the Vulnerable Software and Affected Versions BaconMap version 1.0 Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the filepath parameter of the admin/updatelist.php file...