PT-2012-3003

Name of the Vulnerable Software and Affected Versions LEPTON versions prior to 1.1.4 Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary files. This is achieved by using a .. dot dot in the language parameter of the account/preferences.php...