VYPR

Phppaleo

by Nicolas Tormo

CVEs (2)

  • CVE-2012-5386Oct 11, 2012
    risk 0.03cvss epss 0.02

    Directory traversal vulnerability in index.php in phpPaleo 4.8b180 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phppaleo4_lang cookie, a different vulnerability than CVE-2012-1671. NOTE: the provenance of this information is…

  • CVE-2012-1671Oct 8, 2012
    risk 0.03cvss epss 0.03

    Directory traversal vulnerability in index.php in phpPaleo 4.8b155 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.