CVE-2007-3619

Maia Mailguard 1.0.2 and earlier contain a directory traversal (local file inclusion) in login.php, exploitable via .. in the lang parameter to read arbitrary files or potentially run PHP code. Affected component: login.php; vulnerability type: LFI via unsanitized lang input. Root cause: improper...