CVE-2008-1352

CVE-2008-1352 is a directory traversal flaw in EdiorCMS (ecms) 3.0, exploitable via a ".." sequence in the _SearchTemplate parameter during Title searches, enabling reading of arbitrary files. The affected component is the search.php handling Title search in ecms 3.0. The available references (NV...