CVE-2008-0819

CVE-2008-0819 concerns a directory traversal vulnerability in PlutoStatus Locator 1.0 pre alpha. The flaw resides in index.php and allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) sequence in the page parameter. Documented impact indicates local fil...