Unrated severityNVD Advisory· Published Jun 2, 2010· Updated Apr 29, 2026
CVE-2010-2136
CVE-2010-2136
Description
Directory traversal vulnerability in admin/index.php in Article Friendly, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
Affected products
1- cpe:2.3:a:articlefriendly:article_friendly:5.14:-:pro:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- osvdb.org/62624nvdExploit
- www.packetstormsecurity.com/1002-exploits/articlefriendly-lfi.txtnvdExploit
- www.securityfocus.com/bid/38461nvdExploit
- secunia.com/advisories/38715nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/56598nvd
News mentions
0No linked articles in our index yet.