CVE-2008-4486

Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

Directory traversal

Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CVE-2008-4486

Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CVE-2008-4486

CVE-2008-4486 describes a directory traversal vulnerability in the SAC.php component of SACphp, used in Yerba 6.3 and earlier. An attacker can abuse a '..' in the mod parameter to cause index.php in SAC.php to include and execute arbitrary local files. The CVE entry notes remote access with netwo...