NuytsTech Security

CVE-2008-4662

by ·

Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.

Date published : 2008-10-21

http://www.securityfocus.com/bid/31743

http://www.securityfocus.com/archive/1/492877/100/0/threaded

Tags: