fkie_cve-2005-2169

Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via ".../...//" sequences in the file parameter, which are reduced to "../" when PHPSource Printer uses a regular expression to remove "../" sequences.

GHSA-6g7p-3fmx-8jh6

VAR-200507-0076

----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?

Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE: Quick & Dirty PHPSource Printer Directory Traversal Vulnerability

SECUNIA ADVISORY ID: SA15900

VERIFY ADVISORY: http://secunia.com/advisories/15900/

CRITICAL: Moderately critical

IMPACT: Exposure of system information, Exposure of sensitive information

WHERE: >From remote

SOFTWARE: Quick & Dirty PHPSource Printer 1.x http://secunia.com/product/5323/

DESCRIPTION: Seth Alan Woolley has discovered a vulnerability in Quick & Dirty PHPSource Printer, which can be exploited by malicious people to gain knowledge of sensitive information.

Input passed to the "file" parameter in "source.php" is not properly sanitised before being used.

The vulnerability has been confirmed in version 1.0. Other versions may also be affected.

SOLUTION: The vendor has released version 1.…

Most recent entries from all

fkie_cve-2005-2169

GHSA-6g7p-3fmx-8jh6

gsd-2005-2169

VAR-200507-0076