mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-23 15:00:20 +02:00
0xMarcio
747 B
747 B
CVE-2009-1912
Description
Directory traversal vulnerability in src/func/language.php in webSPELL 4.2.0e and earlier allows remote attackers to include and execute arbitrary local .php files via a .. (dot dot) in a language cookie. NOTE: this can be leveraged for SQL injection by including awards.php.
POC
Reference
Github
No PoCs found on GitHub currently.