CVE-2011-0405 in PhpGedView

Sumário (Inglês)

Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the pgvaction parameter.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

10/01/2011

Divulgação

10/01/2011

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
56015	PhpGedView module.php Travessia de Diretório	22	Alto	Não definido	CVE-2011-0405

Fontes

• MITRE
• NVD
• CVE Details