CVE-2007-6554

CVE-2007-6554 affects TeamCal Pro 3.1.000 and earlier. A directory traversal flaw allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the lang parameter to index.php, register.php, login.php, or statistics.php. The vulnerability is rooted in imprope...