Description
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.
Remediation
References
Related Vulnerabilities
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-31548)
SugarCRM Improper Input Validation Vulnerability (CVE-2011-0745)
WordPress Plugin WP-Live Chat by 3CX Arbitrary File Upload (8.0.31)
PHP Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2004-0594)
WordPress Plugin URL Cloak & Encrypt Cross-Site Scripting (2.0)