CVE-2010-4858: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. dot dot in the showlang parameter...

PT-2011-1793

Name of the Vulnerable Software and Affected Versions DNET Live-Stats version 0.8 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the showlang parameter of the team.rc5-72.php file. Recommendations For DN...