CVE-2007-4641

CVE-2007-4641 affects Pakupaku CMS 0.4 and earlier. A directory traversal flaw in index.php allows remote attackers to include and execute arbitrary local files by manipulating the page parameter with .., demonstrated by injecting code into an Apache log file. This enables partial confidentiality...