Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the page_file parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-02-26T16:00:00
Updated: 2024-08-07T11:27:35.033Z
Reserved: 2009-02-26T00:00:00
Link: CVE-2008-6290
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-02-26T16:17:19.547
Modified: 2017-09-29T01:33:04.620
Link: CVE-2008-6290
Redhat
No data.