CVE-2006-5731: Undefined Security Weakness

Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the siteconfcurl parameter, as demonstrated by a POST to news/comment.php containing PHP code, which is stored under...