RSS   Podatności dla 'Potato news'   RSS

2009-02-24
 
CVE-2009-0722

CWE-22
 

 
Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the user cookie parameter.

 


Copyright 2024, cxsecurity.com

 

Back to Top