CVE-2008-0501 – phpMyClub 0.0.1 - 'page_courante' Local File Inclusion

https://notcve.org/view.php?id=CVE-2008-0501

Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page_courante parameter to the top-level URI. Vulnerabilidad de salto de directorio en phpMyClub 0.0.1 permite a atacantes remotos incluir y ejecutar archivos locales a su elección mediante un .. (punto punto) en el parámetro page_courante de la URI de nivel superior. • https://www.exploit-db.com/exploits/5000 http://www.securityfocus.com/bid/27480 http://www.vupen.com/english/advisories/2008/0350 https://exchange.xforce.ibmcloud.com/vulnerabilities/40007 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •