← Database

CVE-2009-2224

MEDIUM CVSS: 4.3 Published: 2009-06-26 Modified: 2026-06-16

Description

Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the g_lang parameter.

Affected Platforms

An Guestbook An Guestbook

Weakness Type

CWE-22

References