Directory traversal

Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2895

CVE-2008-2895 describes a directory traversal vulnerability in the AproxEngine 5.1.0.4 web interface (index.php). The issue allows an attacker to induce local file inclusion and execution by supplying a .. in the page parameter, due to the underlying path traversal in the PHP code. This vulnerabi...