| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyagenda | ≤ 3.1_beta_1 |
Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file that apparently contains PHP code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free