CVE-2007-3772

CVE-2007-3772 describes a directory traversal vulnerability in PsNews 1.1, where the vulnerable component is news/show.php. An attacker can abuse the newspath parameter by inserting a .. (dot dot) to cause local files to be included and potentially executed. This leads to a partial confidentialit...