CVE-2007-3505

CVE-2007-3505 involves multiple directory traversal flaws in QuickTalk forum 1.3 that allow remote attackers to include and execute arbitrary local files via a .. sequence in the lang parameter of qtf_checkname.php, qtf_j_birth.php, or qtf_j_exists.php. The affected component is the QuickTalk for...