CVE-2010-1003

Directory traversal vulnerability in www/editor/tiny_mce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langname parameter.

Date published : 2010-03-19

http://www.securityfocus.com/bid/38787

http://www.securityfocus.com/archive/1/510155/100/0/threaded