| Package | Affected versions | Patched versions |
|---|---|---|
| phpcdb | ≤ 1.0 |
Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang_global parameter to (1) firstvisit.php, (2) newfolder.php, (3) showfolders.php, (4) newlang.php, (5) showinnerfolder.php, (6) writecode.php, and (7) showcode.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free