mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 11:06:19 +00:00
772 B
772 B
CVE-2005-2635
Description
Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) layerstyle parameter to adlayer.php or (2) language parameter to js-form.php.
POC
Reference
- http://www.securityreason.com/adv/phpAdsnew.SR.16.asc
- http://www.securityreason.com/adv/phpAdsnew.SR.16.asc
Github
No PoCs found on GitHub currently.