CVE-2007-3082

This CVE affects Sendcard 3.4.1 and earlier, where a directory traversal flaw in sendcard.php allows remote attackers to include and execute arbitrary local files via a .. in the sc_language parameter. The underlying issue is improper validation of a user-controlled path, enabling potential arbit...