PEAR LiveUser Unauthorized File Access Vulnerability

LiveUser is prone to an unauthorized file-access vulnerability. This issue is due to a failure in the package to properly sanitize user-supplied input.

An attacker can exploit this issue to delete arbitrary files in the context of the webserver process and confirm the existence of arbitrary files.


 

Privacy Statement
Copyright 2010, SecurityFocus