CVE-2007-6471

NONE

Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ (dot d

Publicado: 12/20/2007Atualizado: 4/9/2025
Ver no NVDVer no MITRE

Descrição

Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ (dot dot backslash) in the config parameter.

Análise IADesenvolvido por IA

Produtos Afetados

phpayphpay
2.2.1
phpayphpay
2.02.01

Exploits Disponíveis (1)

Referências