CVE

Id
10681  
CVE No.
CVE-2004-2255  
Status
Candidate  
Description
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.  
Phase
Assigned (20050717)  
Votes
None (candidate not yet proposed)  
Comments