Files
CVEs-PoC/2010/CVE-2010-5281.md
2025-09-29 21:09:30 +02:00

792 B

CVE-2010-5281

Description

Directory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. NOTE: some of these details are obtained from third party information.

POC

Reference

Github

No PoCs found on GitHub currently.