Description

Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a .. (dot dot) in the install_lang parameter.

Remediation

References

CVE-2014-9574

Related Vulnerabilities

PHP Other Vulnerability (CVE-2007-1287)

WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Cross-Site Request Forgery (1.13.4)

OpenSSL Resource Management Errors Vulnerability (CVE-2010-2939)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-16335)

Atlassian Jira Improper Authentication Vulnerability (CVE-2021-41312)

Severity

Critical

Classification

CVE-2014-9574 CWE-22

Tags

Missing Update Known Vulnerabilities