CVE-2007-5321

CVE-2007-5321 affects Verlihub Control Panel (VHCP) versions 1.7 and earlier, where index.php is vulnerable to a directory traversal via the page parameter (..), allowing remote inclusion of arbitrary files. Root cause is improper sanitization of the page parameter, enabling directory traversal. ...