CVE-2008-1492

CVE-2008-1492 affects CoronaMatrix phpAddressBook 2.11 (and noted vector in 2.0). The issue is directory traversal via a ".." in the skin parameter, exploitable in index.php and install.php to include and execute arbitrary local files. This enables remote attackers to access local files and poten...