CVE-2007-0979

Vulnerability: LifeType (PHP) contains an information disclosure via the rss.php?profile parameter. Affected versions: LifeType before 1.1.6 and 1.2 before 1.2-beta2. Root cause: input is not properly sanitized, allowing directory traversal and reading arbitrary files. Impact: remote attacker can...