CVE-2007-1577

CVE-2007-1577 affects GeBlog 0.1. Affected component: index.php. Root cause: directory traversal via the GLOBALS[tplname] parameter, allowing remote attackers to include and execute arbitrary local files (via dot-dot sequences). The attack is demonstrated by injecting PHP into an Apache log file ...