Description

Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a .. (dot dot) in the install_lang parameter.

Remediation

References

CVE-2014-9574

Related Vulnerabilities

WordPress Improper Authentication Vulnerability (CVE-2022-43504)

Python Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2018-1000802)

MySQL CVE-2016-0644 Vulnerability (CVE-2016-0644)

Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.34)

PHP Other Vulnerability (CVE-2003-0861)

Severity

Critical

Classification

CVE-2014-9574 CWE-22

Tags

Missing Update Known Vulnerabilities