| Package | Affected versions | Patched versions |
|---|---|---|
| fudforum | = 1.2.8= 1.9.8= 2.0.2 |
tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free