Vulnerability in Phpadsnew

CVE-2006-5437

Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the phpAds_config[language] parameter. NOTE: this issue could not be reproduced by a third party

EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.

Affected products

  • Phpadsnew — versions 2.0.8
  • N/a — versions n/a

References