CVE-2010-2006

Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute…

published May 20, 2010

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06688 · 93.8th percentile
Published
2010-05-20T21:00Z
EPSS history
Timeline
  • 20 MAY 21:00Z
    Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute…
    cvelistv5