EUVD-2012-5305

Malware in sbrugna...

CVE-2012-5386

CVE-2012-5386 affects phpPaleo 4.8b180 and earlier, caused by a directory traversal in index.php that allows remote attackers to include and execute arbitrary local files via a .. in the phppaleo4_lang cookie (cookie-based/input parameter manipulation). The issue is explicitly described across mu...

CVE-2012-5386: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in phpPaleo 4.8b180 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the phppaleo4lang cookie, a different vulnerability than CVE-2012-1671. NOTE: the provenance of this information is unknown; the details are...