CVE-2008-2913

Concretely, CVE-2008-2913 affects Devalcms 1.4a and its func.php, where directory traversal is possible when magic_quotes_gpc is disabled. An attacker can use a .. in the currentpath parameter together with certain .../..... sequences in the currentfile parameter to trigger index.php and include/...

CVE-2008-2913

Directory traversal vulnerability in func.php in Devalcms 1.4a, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currentpath parameter, in conjunction with certain ... triple dot and ..... sequences in the currentfile...

devalcms-lfi.txt

===================================================== Devalcms 1.4a Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Devalcms 1.4a (currentfile) Local File Inclusion Vulnerability

No description provided by source. ===================================================== Devalcms 1.4a Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Devalcms 1.4a - currentfile Local File Inclusion

Devalcms 1.4a - currentfile Local File Inclusion ===================================================== Devalcms 1.4a Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

Devalcms 1.4a (currentfile) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================== Devalcms 1.4a currentfile Local File Inclusion Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||...

Devalcms 1.4a - 'currentfile' Local File Inclusion

===================================================== Devalcms 1.4a Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...