CVE-2010-1059

The CVE concerns Phpkobo Address Book Script 1.09, where a directory traversal flaw in staff/app/common.inc.php can be exploited when magic_quotes_gpc is disabled. An attacker can include and execute arbitrary local files by manipulating the LANG_CODE parameter, enabling at least partial impact t...

CVE-2010-1058

CVE-2010-1058 describes a directory traversal vulnerability in the Phpkobo Address Book Script 1.09. The flaw resides in the file codelib/cfg/common.inc.php, where the LANG_CODE parameter can be manipulated (via ".." paths) to include and execute arbitrary local files when magic_quotes_gpc is dis...