CVE-2009-3823

CVE-2009-3823 describes a directory traversal vulnerability in Mobilelib GOLD 3.0, affecting the file myhtml.php. When magic_quotes_gpc is enabled, an attacker can read arbitrary files by supplying a dot-dot (“..”) sequence in the GLOBALS[page] parameter. The root cause is improper validation/san...