CVE-2010-2136

CVE-2010-2136 describes a directory traversal vulnerability in Article Friendly’s admin/index.php. When magic_quotes_gpc is disabled, attackers can read arbitrary files by injecting a ".." in the filename parameter. Affected software is the Article Friendly package; the underlying issue is improp...