Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter ($cmd variable) to index.php.
References
- http://marc.info/?l=bugtraq\u0026m=107392764118403\u0026w=2
- http://www.securityfocus.com/bid/9395
- http://www.securitytracker.com/id?1008689
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14203
- http://marc.info/?l=bugtraq\u0026m=107392764118403\u0026w=2
- http://www.securityfocus.com/bid/9395
- http://www.securitytracker.com/id?1008689
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14203