CVE-2008-1645

Directory traversal vulnerability in body.php in phpSpamManager phpSM 0.53 beta allows remote attackers to read arbitrary local files via a .. dot dot in the filename parameter...

CVE-2008-1645

CVE-2008-1645 affects phpSpamManager (phpSM) 0.53 beta. The vulnerability is a directory traversal in body.php where a crafted filename parameter containing ".." allows a remote attacker to read arbitrary local files. This is a path traversal weakness in the file handling logic. Exploitation stat...