CVE-2005-2169

Summary

Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via "…/…//" sequences in the file parameter, which are reduced to "../" when PHPSource Printer uses a regular expression to remove "../" sequences.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://securitytracker.com/id?1014376
• http://secunia.com/advisories/15900
• http://guff.szub.net/2005/07/04/quick-and-dirty-security/

References

• http://securitytracker.com/id?1014376
• http://secunia.com/advisories/15900
• http://guff.szub.net/2005/07/04/quick-and-dirty-security/

• ←Previous
• Next→