CVE-2009-4896

CVE-2009-4896 affects the mlmmj project’s web interface mlmmj-php-admin, specifically versions 1.2.15 through 1.2.17. The vulnerability is a directory-traversal flaw allowing remote authenticated users to overwrite, create, or delete arbitrary files, or reveal existence of arbitrary directories, ...

[SECURITY] [DSA 2073-1] New mlmmj packages fix directory traversal

------------------------------------------------------------------------ Debian Security Advisory DSA-2073-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 20, 2010 http://www.debian.org/security/faq -...