CVE-2006-6694

CVE-2006-6694 concerns a directory traversal vulnerability in include/config.php of E-Uploader Pro versions up to 1.0. The root cause is improper handling of the language parameter, allowing traversal via .. and enabling an attacker to upload a PHP payload inside a .JPG file and then access the f...