Vulnerability in Thorsten Korner 123tkshop
CVE-2002-2167
Directory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences terminated by a null character in the $designNo variable, which is part of an "include" function call.
EPSS: 0.017 (74.6th percentile) — read the EPSS interpretation.
Affected products
- Thorsten_korner 123tkshop — versions 0.2, 0.3
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)