CVE-2010-2136 Directory traversal vulnerability in admin/index.php in Article Friendly, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename paramete...
MediumCVSS 6.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in admin/index.php in Article Friendly, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| articlefriendly article friendly | = 5.14 | No fix listed |
References
- 62624 exploit vdb-entry
- 38715 third-party-advisory vendor-advisory
- www.packetstormsecurity.com exploit
- 38461 exploit vdb-entry
- articlefriendly-index-file-include(56598) vdb-entry