CVE-2008-5989

CVE-2008-5989 affects PHPcounter 1.3.2 and earlier. A directory traversal flaw in defs.php when magic_quotes_gpc is disabled allows remote attackers to use a .. in the l parameter to include and execute arbitrary local files. This is a remote, network-exposed issue with partial confidentiality/in...

CVE-2008-5989

creationtimestamp| type| source ---|---|--- 2008-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6553...