EUVD-2008-2214

Malware in sbrugna...

CVE-2008-2217: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmimgpath parameter...