Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter.
References
Configurations
Information
Published : 2005-11-18 15:03
Updated : 2016-10-17 20:36
NVD link : CVE-2005-3680
Mitre link : CVE-2005-3680
JSON object : View
CWE
Products Affected
xoops
- xoops