← Database

CVE-2010-1110

MEDIUM CVSS: 5.0 Published: 2010-03-25 Modified: 2026-06-16

Description

Directory traversal vulnerability in index.php in phpMySport 1.4 allows remote attackers to list arbitrary directories via a .. (dot dot) in the current_folder parameter.

Affected Platforms

Djayp Phpmysport

Weakness Type

CWE-22

References