Beveiligingsadvies
CVE-2007-6471
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ (dot dot backslash) in the config parameter.