Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary local files via directory traversal sequences in a base64-encoded f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Link | Resource |
---|---|
http://secunia.com/advisories/38518 | Vendor Advisory |
http://www.securityfocus.com/bid/38709 |
Configurations
Information
Published : 2010-02-11 09:30
Updated : 2010-03-25 22:37
NVD link : CVE-2010-0613
Mitre link : CVE-2010-0613
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
arwscripts
- fonts_script