CVE-2008-4741 Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter.
MediumCVSS 5.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| far-php | = 1.00 | No fix listed |
References
- 20080821 Null Byte Local file Inclusion in FAR - PHP Project version:1.0 mailing-list
- 31563 third-party-advisory vendor-advisory
- 4507 third-party-advisory
- 20080822 Re: Null Byte Local file Inclusion in FAR - PHP Project version:1.0 mailing-list
- 30781 vdb-entry
- farphp-index-file-include(44606) vdb-entry