Unrated severityNVD Advisory· Published Jun 2, 2010· Updated Jun 16, 2026
CVE-2010-2136
CVE-2010-2136
Description
Directory traversal vulnerability in admin/index.php in Article Friendly, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
Affected products
2cpe:2.3:a:articlefriendly:article_friendly:5.14:-:pro:*:*:*:*:*+ 1 more
- cpe:2.3:a:articlefriendly:article_friendly:5.14:-:pro:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
5- osvdb.org/62624nvdExploit
- www.packetstormsecurity.com/1002-exploits/articlefriendly-lfi.txtnvdExploit
- www.securityfocus.com/bid/38461nvdExploit
- secunia.com/advisories/38715nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/56598nvd
News mentions
0No linked articles in our index yet.