CVE-2010-0613

Description

Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary local files via directory traversal sequences in a base64-encoded f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• arwscripts / fonts_script

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/38518
• MISChttp://www.securityfocus.com/bid/38709