PT-2012-3003

Name of the Vulnerable Software and Affected Versions LEPTON versions prior to 1.1.4 Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary files. This is achieved by using a .. dot dot in the language parameter of the account/preferences.php...

CVE-2012-0998: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute arbitrary files via a .. dot dot in the language parameter...