Vulnerability in My Postcards Platinum

CVE-2002-1966

Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.

EPSS: 0.031 (86.5th percentile) — read the EPSS interpretation.

Affected products

My_postcards My_postcards_platinum — versions 5.0, 6.0
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, x_refsource_MISC)