Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the env parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2010-08-25T19:00:00
Updated: 2024-08-07T07:24:53.651Z
Reserved: 2010-08-25T00:00:00
Link: CVE-2009-4986
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-08-25T20:00:14.533
Modified: 2017-09-19T01:30:08.563
Link: CVE-2009-4986
Redhat
No data.