The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to index.php.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2015-03-23T16:00:00
Updated: 2024-08-06T13:40:24.915Z
Reserved: 2014-12-04T00:00:00
Link: CVE-2014-9261

No data.

Status : Modified
Published: 2015-03-23T16:59:00.070
Modified: 2024-11-21T02:20:29.873
Link: CVE-2014-9261

No data.