CVE-2009-3823

CVE-2009-3823 describes a directory traversal vulnerability in Mobilelib GOLD 3.0, affecting the file myhtml.php. When magic_quotes_gpc is enabled, an attacker can read arbitrary files by supplying a dot-dot (“..”) sequence in the GLOBALS[page] parameter. The root cause is improper validation/san...

CVE-2009-3823

Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magicquotesgpc is enabled, allows remote attackers to read arbitrary files via a .. dot dot in the GLOBALSpage parameter...