← back
CVE-2010-4931

CVE-2010-4931

EPSS 16.4%
Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder_level parameter. NOTE: this issue has been disputed by a reliable third party
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/14647unverifiedexploitdbwww.exploit-db.com/exploits/14647unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://attrition.org/pipermail/vim/2010-August/002391.htmlhttp://www.exploit-db.com/exploits/14647http://www.securityfocus.com/bid/42456