CVE-2010-4399

Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the CHG_DYNPG_SET_LANGUAGE parameter to index.php. NOTE: some of these details are obtained from third party information.

• CWE-22

• http://osvdb.org/69539
• http://packetstormsecurity.org/files/view/96230/dynpg-lfisqldisclose.txtExploit
• http://secunia.com/advisories/42380Vendor Advisory
• http://www.dynpg.org/cms-freeware_en.php?t=DynPG+Update+4.2.1+Security+Update&read_article=226Patch
• http://www.exploit-db.com/exploits/15646Exploit
• http://www.htbridge.ch/advisory/lfi_in_dynpg.htmlExploit
• http://www.securityfocus.com/bid/45115Exploit
• http://osvdb.org/69539
• http://packetstormsecurity.org/files/view/96230/dynpg-lfisqldisclose.txtExploit
• http://secunia.com/advisories/42380Vendor Advisory
• http://www.dynpg.org/cms-freeware_en.php?t=DynPG+Update+4.2.1+Security+Update&read_article=226Patch
• http://www.exploit-db.com/exploits/15646Exploit
• http://www.htbridge.ch/advisory/lfi_in_dynpg.htmlExploit
• http://www.securityfocus.com/bid/45115Exploit

Published

Dec 6, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4393Heap-based buffer overflow in vidplin.dll in RealNetworks Re…
• CVE-2010-4394Heap-based buffer overflow in RealNetworks RealPlayer 11.0 t…
• CVE-2010-4395Heap-based buffer overflow in RealNetworks RealPlayer 11.0 t…
• CVE-2010-4396Cross-zone scripting vulnerability in the HandleAction metho…
• CVE-2010-4397Integer overflow in the pnen3260.dll module in RealNetworks …
• CVE-2010-4398Stack-based buffer overflow in the RtlQueryRegistryValues fu…7.8
• CVE-2010-4400SQL injection vulnerability in _rights.php in DynPG CMS 4.2.…
• CVE-2010-4401languages.inc.php in DynPG CMS 4.2.0 allows remote attackers…
• CVE-2010-4402Multiple cross-site scripting (XSS) vulnerabilities in wp-lo…
• CVE-2010-4403The Register Plus plugin 3.5.1 and earlier for WordPress all…
• CVE-2010-4404SQL injection vulnerability in the Yannick Gaultier sh404SEF…
• CVE-2010-4405Cross-site scripting (XSS) vulnerability in the Yannick Gaul…