CVE-2010-1060

Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANGCODE parameter...

CVE-2010-1060

CVE-2010-1060 is a directory traversal vulnerability in Phpkobo Short URL 1.01 (staff/app/common.inc.php). When magic_quotes_gpc is disabled, an attacker can use ".." in the LANG_CODE parameter to include and execute arbitrary local files. The NVD entry assigns a CVSS v2 base score of 6.8 (MEDIUM...

CVE-2010-1060

Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANGCODE parameter...