CVE-2010-1061

Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 url/app/common.inc.php and 2 codelib/cfg/common.inc.php...

CVE-2010-1061

The CVE-2010-1061 entry concerns Phpkobo Short URL 1.01. Affected component: the PHP application’s files, specifically url/app/common.inc.php and codelib/cfg/common.inc.php. Root cause: directory traversal via the LANG_CODE parameter when magic_quotes_gpc is disabled. Impact: remote attackers cou...