CVE-2007-4008

CVE-2007-4008 describes a directory traversal vulnerability in the Entertainment Media Sharing CMS, affecting the custom.php component. The root cause is improper handling of the pagename parameter, enabling remote attackers to traverse directories using .. and include/execute local files. This l...