CVE-2008-0798

CVE-2008-0798 describes multiple directory traversal vulnerabilities in the product “artmedic webdesign weblog 1.0.” When magic_quotes_gpc is disabled, remote attackers can read arbitrary files by supplying a .. in the (1) ta parameter to artmedic_index.php (reachable via index.php) or the (2) da...