CVE-2004-0327 Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. (dot dot) sequences in the clang parameter.
MediumCVSS 5.0
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. (dot dot) sequences in the clang parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| skintech phpnewsmanager | = 1.36 | No fix listed |
References
- 20040223 ZH2004-09SA (security advisory): PhpNewsManager Remote arbitrary mailing-list
- 9720 exploit vdb-entry vendor-advisory
- www.zone-h.org
- phpnewsmanager-dotdot-directory-traversal(15283) vdb-entry