CVE-2009-4886

CVE-2009-4886 affects phpCommunity 2.x (notably 2.1.8) with directory traversal flaws that let an attacker read arbitrary server files via the file parameter to module/admin/files/show_file.php or the path parameter to module/admin/files/show_source.php. The OpenVAS entry indicates multiple remot...

phpCommunity2 Multiple Remote Input Validation Vulnerabilities

phpCommunity2 is prone to multiple input-validation vulnerabilities, including multiple directory-traversal issues and SQL-injection issues, and a cross-site scripting issue. Exploiting these issues could allow an attacker to view arbitrary local files within the context of the webserver, steal...