CVE-2002-0441 Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter.
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jerrett taylor php imglist | = 1.1 | No fix listed |
| jerrett taylor php imglist | = 1.2 | No fix listed |
| jerrett taylor php imglist | = 1.2.1 | No fix listed |
References
- phpimglist-dot-directory-traversal(8441) patch vdb-entry vendor-advisory
- www.liquidpulse.net
- 20020311 Directory traversal vulnerability in phpimglist mailing-list vendor-advisory
- 4276 patch vdb-entry vendor-advisory